chore(deps): update direct dependencies and notices

[jingxiang-z]

Description

Checklist

• I am familiar with the Contributing Guidelines.
• My commits are signed off (git commit -s) per the DCO in the Contributing Guidelines.
• New or existing tests cover these changes.
• The documentation is up to date with these changes.

Summary by CodeRabbit

• Chores
  • Updated the Go toolchain and supporting libraries to newer versions.
  • Refreshed software licensing and source-availability notices.
  • Updated recorded versions and links for several third-party components.

[coderabbitai]

📝 Walkthrough

Walkthrough

The PR updates the Go toolchain, direct and indirect dependency versions, and corresponding third-party NOTICE entries. No application code or public APIs are changed.

Changes

Dependency and notice updates

Layer / File(s)	Summary
Update direct dependencies and notices go.mod, NOTICE	The Go directive and direct dependency versions are updated, while NOTICE entries receive matching version and project-link changes.
Refresh transitive dependencies go.mod	Indirect OpenAPI, container registry, Sigstore, and Go tooling dependencies are revised.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• NVIDIA/fleet-intelligence-client#23: Updates overlapping NOTICE attribution and source-availability text.
• NVIDIA/fleet-intelligence-client#24: Updates related Sigstore dependencies and the Go toolchain directive.

Suggested reviewers: emilyzhangbg

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately reflects the main changes: dependency bumps in go.mod and NOTICE updates.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/boulder-mpl-notice

---

_{Comment @coderabbitai help to get the list of available commands.}