#1982)

Bumps [github.com/grpc-ecosystem/grpc-health-probe](https://github.com/grpc-ecosystem/grpc-health-probe) from 0.4.49 to 0.4.50.
- [Release notes](https://github.com/grpc-ecosystem/grpc-health-probe/releases)
- [Commits](grpc-ecosystem/grpc-health-probe@v0.4.49...v0.4.50)

---
updated-dependencies:
- dependency-name: github.com/grpc-ecosystem/grpc-health-probe
  dependency-version: 0.4.50
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github.com/docker/cli](https://github.com/docker/cli) from 29.4.3+incompatible to 29.5.0+incompatible.
- [Commits](docker/cli@v29.4.3...v29.5.0)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.5.0+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.81.0 to 1.81.1.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.81.0...v1.81.1)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.81.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.40.0 to 1.41.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.40.0...v1.41.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.28.3 to 2.29.0.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.28.3...v2.29.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github.com/docker/cli](https://github.com/docker/cli) from 29.5.0+incompatible to 29.5.1+incompatible.
- [Commits](docker/cli@v29.5.0...v29.5.1)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.5.1+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

opm validate silently accepts invalid skipRange values, which can lead
to broken upgrade graphs discovered only at runtime. Parse the
skipRange field using semver.ParseRange() and surface any error in the
validation error tree.

Bumps [github.com/docker/cli](https://github.com/docker/cli) from 29.5.1+incompatible to 29.5.2+incompatible.
- [Commits](docker/cli@v29.5.1...v29.5.2)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 29.5.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.31 to 1.7.32.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v1.7.31...v1.7.32)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-version: 1.7.32
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump go.podman.io/image/v5 from 5.39.2 to 5.40.0

Bumps [go.podman.io/image/v5](https://github.com/containers/container-libs) from 5.39.2 to 5.40.0.
- [Release notes](https://github.com/containers/container-libs/releases)
- [Commits](podman-container-tools/container-libs@image/v5.39.2...image/v5.40.0)

---
updated-dependencies:
- dependency-name: go.podman.io/image/v5
  dependency-version: 5.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(test): use explicit registries.conf to avoid v1 format error

go.podman.io/image/v5 v5.40.0 now rejects v1 registries.conf with a
hard error. CI runners may have a system-level v1 config at
/etc/containers/registries.conf, causing test failures. Provide an
empty v2 registries.conf and an empty drop-in directory in the test
SystemContext so the tests are isolated from host configuration.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Per G. da Silva <pegoncal@redhat.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Per G. da Silva <pegoncal@redhat.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Per G. da Silva <pegoncal@redhat.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Introduce a new ExperimentalRegistry gRPC service with a streaming
endpoint for retrieving custom schema blobs (non-core FBC schemas like
"custom.operator.io") from catalog caches, filtered by schema name and
optionally by package name.

Design:
- Separate ExperimentalRegistry service to isolate experimental API
  surface from the stable Registry service
- Callers must send X-Acknowledge-Experimental: true as gRPC metadata;
  without it the endpoint silently returns an empty stream
- Schema and package name inputs are validated against an allowlist
  regex to prevent path traversal
- Both JSON (filesystem) and pogreb (embedded KV) cache backends
  implement PutMeta/SendMetas for storing and streaming custom schema
  blobs at build and query time
- Pogreb stores multiple blobs per (schema, package) key using
  length-prefixed encoding for O(1) lookup

Also:
- Extract protobuf well-known types (google/protobuf/struct.proto)
  during protoc download so codegen can import them
- Add ListBundles to README API listing

Signed-off-by: Per G. da Silva <pegoncal@redhat.com>
Co-authored-by: Per G. da Silva <pegoncal@redhat.com>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

PutMeta receives JSON and each backend decides its internal format.
Pogreb now converts JSON to proto binary at build time and uses
proto.Unmarshal at read time, which is cheaper than JSON parsing.
The SendMetas sender signature changes to func(*structpb.Struct)
so backends own the deserialization. JSON backend still stores and
parses JSON.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

#1995)

Bumps the golang-x-deps group with 1 update: [golang.org/x/sys](https://github.com/golang/sys).


Updates `golang.org/x/sys` from 0.44.0 to 0.45.0
- [Commits](golang/sys@v0.44.0...v0.45.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.45.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang-x-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [go.podman.io/common](https://github.com/containers/container-libs) from 0.67.1 to 0.68.0.
- [Release notes](https://github.com/containers/container-libs/releases)
- [Commits](podman-container-tools/container-libs@common/v0.67.1...common/v0.68.0)

---
updated-dependencies:
- dependency-name: go.podman.io/common
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>