Bump the go-deps group across 1 directory with 4 updates

[dependabot]

Bumps the go-deps group with 4 updates in the / directory: cloud.google.com/go/kms, github.com/google/cel-go, golang.org/x/net and golang.org/x/oauth2.

Updates cloud.google.com/go/kms from 1.25.0 to 1.26.0

Release notes

Sourced from cloud.google.com/go/kms's releases.

retail 1.26.0

1.26.0 (2026-01-29)

Features

• add a user_attributes field in SearchRequest that can be used for personalization (PiperOrigin-RevId: 861314205) (d8ea738a)

• add a model_scores field in SearchResponse.results to expose model quality signals (PiperOrigin-RevId: 861314205) (d8ea738a)

kms: v1.26.0

v1.26.0 (2026-02-19)

Features

• Introduced the RetiredResource resource to track records of deleted keys and prevent the reuse of their resource names (PiperOrigin-RevId: 868670725) (d3eb851d)

• Added ListRetiredResources and GetRetiredResource RPCs to manage and view these records (PiperOrigin-RevId: 868670725) (d3eb851d)

• Added DeleteCryptoKey and DeleteCryptoKeyVersion RPCs to permanently remove resources (PiperOrigin-RevId: 868670725) (d3eb851d)

• Add KeyProjectResolutionMode to AutokeyConfig to support project-level configurations (PiperOrigin-RevId: 870858133) (d3eb851d)

• Add support for project level key usage tracking (PiperOrigin-RevId: 871667322) (d3eb851d)

• Add more post-quantum (PQ) signature algorithms to CryptoKeyVersion (PiperOrigin-RevId: 870858133) (d3eb851d)

Documentation

• Clarify supported resources for the crypto_key_backend field in ImportJob (PiperOrigin-RevId: 870858133) (d3eb851d)

• Update documentation for AutokeyAdmin service and messages to support folder and project-level configurations (PiperOrigin-RevId: 870858133) (d3eb851d)

Changelog

Sourced from cloud.google.com/go/kms's changelog.

1.26.0 (2024-02-21)

Features

• documentai: A new field schema_override is added to message ProcessOptions (#9400) (a86aa8e)
• documentai: A new message FoundationModelTuningOptions is added (7e6c208)

Commits

• 8ebb896 chore: librarian release pull request: 20251010T200657Z (#13107)
• befb302 test(internal/postprocessor): skip test that expects certain live config (#13...
• 1930511 testing(internal/godocfx): convert equality check to a diff check (#13089)
• e6b9d41 chore: migrate compute/metadata to Librarian (#13009)
• 6259aee fix(storage): skip download of file outside of target dir (#12945)
• bafd691 perf(bigtable): parallelize the exportTimeSeries function (#13004)
• 2b75879 chore: release main (#13082)
• 9157a71 chore: bump changed modules (#13083)
• a93d961 fix: upgrade gRPC service registration func (#13079)
• 75c95f3 chore: librarian generate pull request: 20251009T073841Z (#13080)
• Additional commits viewable in compare view

Updates github.com/google/cel-go from 0.26.1 to 0.27.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.27.0

Release Summary

This release focuses on improving developer tooling and stability. Key highlights include significant enhancements to the REPL (YAML configuration support and parse-only evaluation), the addition of cost estimation for regex operations, and improved test coverage reporting.

On the stability front, this release addresses race conditions in reference types, improves namespace resolution, and ensures formatting directives align strictly with the CEL specification.

Note: This release includes a breaking change regarding how types are handled as variables. Please review the "Breaking Changes" section below.

⚠ Breaking Changes

Remove types as variables: The logic for handling types has been relaxed to support safe rollout of feature packages which introduce new types whose names may collide with existing variables. Please review your policies if you relied on types behaving strictly as variables in previous versions. [PR #1262](google/cel-go#1262)

Features & Enhancements

REPL & Tooling

• YAML Configuration: The REPL now supports reading and writing YAML environment configurations. [PR #1250](google/cel-go#1250)

• Parse-Only Mode: Added parse-only evaluation capabilities to the REPL. [PR #1254](google/cel-go#1254)

• Test Coverage: Introduced logic for CEL test coverage calculation and updated the reporter to handle error/unknown scenarios.[PR #1209](google/cel-go#1209) & [PR #1215](google/cel-go#1215)

Core Library

• Regex Costing: Added support for cost estimation and tracking within the regex library. [PR #1200](google/cel-go#1200)

• JSON Type Exposure: Exposed CEL JSON types to assist developers in converting to native values. [PR #1261](google/cel-go#1261)

• Policy Composition: Source information is now preserved during CEL policy composition, aiding in debugging. [PR #1253](google/cel-go#1253)

Extensibility:

• Updated extension option factory to resolve by ID (#1249).

• Refactored match output compiling to accept user-defined logic (#1246).

• Exposed Match source ID to callers (#1227).

Build & Maintenance

• Bazel: Migrated to use Bazel module only and improved configuration for dependent builds. [PR #1231](google/cel-go#1231) & [PR #1228](google/cel-go#1228)

• Cleanup: Removed strcase dependency, removed AppEngine code from REPL, and performed general linting. [PR #1230](google/cel-go#1230), #1216, #1251

Bug Fixes

• Concurrency: Fixed a race condition in the checker regarding reference types. [PR #1224](google/cel-go#1224)

• Namespace Resolution: Addressed an issue with namespace resolution. [PR #1256](google/cel-go#1256)

• Spec Compliance: Fixed formatting directives to fully support requirements documented in the cel-spec. [PR #1232](google/cel-go#1232)

... (truncated)

Commits

• 450089b Preserve source information during CEL policy composition. (#1253)
• c66b313 Remove types as variables to allow user-defined variables to shadow type decl...
• bff3a72 Expose the CEL JSON types to assist with conversion to native values (#1261)
• 559cbc9 Remove errant diff checked into a prior PR (#1260)
• fe26efa Simplify the disambiguation logic to a single boolean (#1263)
• 52280ba Clean up unused source info after checker rewrites the AST. (#1258)
• 3cb5705 Namespace resolution fix (#1256)
• 409bcbe Refactor match output compiling to accept user-defined logic. (#1246)
• e9f15ea Enable two var comprehension conformance tests. (#1255)
• 057fa1a Add parse only evaluation to REPL (#1254)
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.50.0 to 0.52.0

Commits

• 316e20c go.mod: update golang.org/x dependencies
• 9767a42 internal/http3: add support for plugging into net/http
• 4a81284 http2: update docs to disrecommend this package
• dec6603 dns/dnsmessage: reject too large of names early during unpack
• 8afa12f http2: deprecate write schedulers
• 38019a2 http2: add missing copyright header to export_test.go
• 039b87f internal/http3: return error when Write is used after status 304 is set
• 6267c6c internal/http3: add HTTP 103 Early Hints support to ClientConn
• 591bdf3 internal/http3: add HTTP 103 Early Hints support to Server
• 1faa6d8 internal/http3: avoid potential race when aborting RoundTrip
• Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.35.0 to 0.36.0

Commits

• 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions