This is needed to update x/net which is subject to CVE-2025-47911

Signed-off-by: Dirk Müller <[email protected]>

[release-3.19] chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.43.0

Backport of #30900 to v3.
(cherry picked from commit d448cf1)

Signed-off-by: Reinhard Nägele <[email protected]>
(cherry picked from commit 79a9cc5)

Bumps [github.com/spf13/pflag](https://github.com/spf13/pflag) from 1.0.7 to 1.0.10.
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.7...v1.0.10)

---
updated-dependencies:
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
(cherry picked from commit 73b449f)

Error reported in CI https://github.com/helm/helm/actions/runs/17623700524/job/50075176523?pr=31231

```
Error: cmd/helm/root.go:165:2: SA1019: flags.ParseErrorsWhitelist is deprecated: use [FlagSet.ParseErrorsAllowlist] instead. This field will be removed in a future release. (staticcheck)
```

Close: #31231
Signed-off-by: Benoit Tigeot <[email protected]>
(cherry picked from commit 9a366b4)

The existing check worked for `helm pull downloaded-repo/chart-name`,
but often does not work when using `--repo-url`, depending on the urls
used by the charts.

Signed-off-by: Luna Stadler <[email protected]>
(cherry picked from commit 1031b67)

Closes: #31202

Signed-off-by: Benoit Tigeot <[email protected]>
(cherry picked from commit 2fe49f9)

- v3.18.5 switched jsonschema and began resolving external $ref
  at compile-time, exposing missing urn handling
  (“no URLLoader registered for urn:…”).
- Add urn scheme loader and pluggable URNResolver. If unresolved, log
  a warning and return a permissive true schema (back-compat).
- Avoid having a duplicated warn logs when we Load the schema twice.

Note: external URNs need AddResource/Resolver (the CLI uses --map for
this).

Close: #31170

Signed-off-by: Benoit Tigeot <[email protected]>
(cherry picked from commit 3f0da15)

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.28 to 1.7.29.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v1.7.28...v1.7.29)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-version: 1.7.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
(cherry picked from commit b548118)