Consider a container with the following layers:
  layer1: a/foo b/bar
  layer2: .wh.a
  layer3: a/baz

When exporting those layers to a flattened filesystem, we cannot skip
processing `a/` because it's been visited before when `a/` is a whiteout
directive. Otherwise the filesystem will end up with `a/foo a/baz b/bar`
when we expect only `a/baz b/bar`.

Signed-off-by: Rafael Fonseca <[email protected]>

* Improve performance of v1.NewHash

Previously, NewHash() made multiple unnecessary heap allocations that have been removed.

I've also added a simple benchmark test to measure the impact. Results below:

Before:

```
go test ./pkg/v1 -run XXX -bench BenchmarkNewHash
goos: darwin
goarch: arm64
pkg: github.com/google/go-containerregistry/pkg/v1
cpu: Apple M1 Pro
BenchmarkNewHash-10    	 8977393	       123.1 ns/op	     160 B/op	       2 allocs/op
PASS
ok  	github.com/google/go-containerregistry/pkg/v1	1.711s
```

After:

```
$ go test ./pkg/v1 -run XXX -bench BenchmarkNewHash
goos: darwin
goarch: arm64
pkg: github.com/google/go-containerregistry/pkg/v1
cpu: Apple M1 Pro
BenchmarkNewHash-10    	15214291	        76.09 ns/op	       0 B/op	       0 allocs/op
PASS
ok  	github.com/google/go-containerregistry/pkg/v1	1.805s
```

* add "Too many separators" cases to TestBadHashes

Bumps the actions group with 4 updates in the / directory: [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request), [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials), [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) and [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `peter-evans/create-pull-request` from 7 to 8
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v7...v8)

Updates `aws-actions/configure-aws-credentials` from 5.1.1 to 6.0.0
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@v5.1.1...v6.0.0)

Updates `golangci/golangci-lint-action` from 9.1.0 to 9.2.0
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@v9.1.0...v9.2.0)

Updates `codecov/codecov-action` from 5.5.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5.5.1...v5.5.2)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: golangci/golangci-lint-action
  dependency-version: 9.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump the root-deps group across 1 directory with 7 updates

Bumps the root-deps group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/containerd/stargz-snapshotter/estargz](https://github.com/containerd/stargz-snapshotter) | `0.18.1` | `0.18.2` |
| [github.com/docker/cli](https://github.com/docker/cli) | `29.0.3+incompatible` | `29.1.5+incompatible` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.10.1` | `1.10.2` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.33.0` | `0.34.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.39.0` | `0.41.0` |



Updates `github.com/containerd/stargz-snapshotter/estargz` from 0.18.1 to 0.18.2
- [Release notes](https://github.com/containerd/stargz-snapshotter/releases)
- [Commits](containerd/stargz-snapshotter@v0.18.1...v0.18.2)

Updates `github.com/docker/cli` from 29.0.3+incompatible to 29.1.5+incompatible
- [Commits](docker/cli@v29.0.3...v29.1.5)

Updates `github.com/klauspost/compress` from 1.18.1 to 1.18.3
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.1...v1.18.3)

Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.10.1...v1.10.2)

Updates `golang.org/x/oauth2` from 0.33.0 to 0.34.0
- [Commits](golang/oauth2@v0.33.0...v0.34.0)

Updates `golang.org/x/sync` from 0.18.0 to 0.19.0
- [Commits](golang/sync@v0.18.0...v0.19.0)

Updates `golang.org/x/tools` from 0.39.0 to 0.41.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.39.0...v0.41.0)

---
updated-dependencies:
- dependency-name: github.com/containerd/stargz-snapshotter/estargz
  dependency-version: 0.18.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-deps
- dependency-name: github.com/docker/cli
  dependency-version: 29.1.5+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-deps
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-deps
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: root-deps
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-deps
- dependency-name: golang.org/x/sync
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-deps
- dependency-name: golang.org/x/tools
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: root-deps
...

Signed-off-by: dependabot[bot] <[email protected]>

* run go mod tidy on cmd/krane

* run go mod tidy on authn/k8schain and authn/kubernetes

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jared Rodriguez <[email protected]>

Bumps the go-deps group with 1 update in the / directory: [github.com/klauspost/compress](https://github.com/klauspost/compress).
Bumps the go-deps group with 1 update in the /pkg/authn/k8schain directory: [k8s.io/client-go](https://github.com/kubernetes/client-go).
Bumps the go-deps group with 1 update in the /pkg/authn/kubernetes directory: [k8s.io/client-go](https://github.com/kubernetes/client-go).


Updates `github.com/klauspost/compress` from 1.18.3 to 1.18.4
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.3...v1.18.4)

Updates `k8s.io/client-go` from 0.34.2 to 0.35.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.34.2...v0.35.1)

Updates `k8s.io/client-go` from 0.34.2 to 0.35.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.34.2...v0.35.1)

Updates `k8s.io/apimachinery` from 0.34.2 to 0.35.1
- [Commits](kubernetes/apimachinery@v0.34.2...v0.35.1)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: k8s.io/client-go
  dependency-version: 0.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: k8s.io/client-go
  dependency-version: 0.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.35.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>