Update deps

[dekkagaijin]

This addresses dependabot alerts for github.com/opencontainers/image-spec and github.com/containerd/containerd.

Commands run were:

go get github.com/opencontainers/image-spec@693428a734f5bab1a84bd2f990d92ef1111cd60c # main@HEAD
go get -u ./...
go mod tidy
go mod vendor
cd pkg/authn/k8schain && go get ./...

oci/image-spec had to be updated manually since changes that we require (annotation constants) weren't included in the 1.0.2 release

[imjasonh]

Thanks!

[codecov-commenter]

Codecov Report

Merging #1188 (05a0552) into main (6a419dc) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##             main    #1188   +/-   ##
=======================================
  Coverage   75.18%   75.18%           
=======================================
  Files         108      108           
  Lines        7887     7887           
=======================================
  Hits         5930     5930           
  Misses       1387     1387           
  Partials      570      570           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6a419dc...05a0552. Read the comment docs.

[imjasonh]

There's also a dependabot alert for containerd: https://github.com/google/go-containerregistry/security/dependabot/go.sum/github.com%2Fcontainerd%2Fcontainerd/open