Signed-off-by: Matthias Fehr <[email protected]>
(cherry picked from commit aa33f4f)

Signed-off-by: Matthias Fehr <[email protected]>
(cherry picked from commit 45367ca)

Signed-off-by: Matthias Fehr <[email protected]>
(cherry picked from commit 2acda0c)

Signed-off-by: Matthias Fehr <[email protected]>
(cherry picked from commit 7d22040)

Signed-off-by: Matthias Fehr <[email protected]>
(cherry picked from commit cab1fc8)

vcs had a release due to a CVE. This updates to the latest version
that mitigates the CVE.

Note, the Makefile was updated so that `make build` would build
without cgo just like gox does in the CI pipeline. They should
both build without cgo so we can catch issues before merging to
master where a canary build would pick up the problem.

Signed-off-by: Matt Farina <[email protected]>
(cherry picked from commit 3490f1e)

Signed-off-by: Matt Farina <[email protected]>
(cherry picked from commit a87ab07)

Fix value precedence when importing values from child. Closes #9940

Signed-off-by: Aram Zegerius <[email protected]>
(cherry picked from commit c4952c9)

Closes #9940

Signed-off-by: Aram Zegerius <[email protected]>
Signed-off-by: Ankita Bhopatkar <[email protected]>
(cherry picked from commit 4b49f35)

Signed-off-by: Matthew Fisher <[email protected]>
(cherry picked from commit adfb52e)

Problem: the warnings don't give enough details about which
values are problematic, only the name of the leaf key. This is
all the more annoying when you have a chart depending on other charts.

```
mainchart
 |
 +- subchart1
 +- subchart2
 +- subchart3
```

Here are some warnings I get before the change:
```
coalesce.go:199: warning: destination for credentials is a table. Ignoring non-table value
coalesce.go:160: warning: skipped value for resources: Not a table.
coalesce.go:160: warning: skipped value for googleSheetsServiceAccount: Not a table.
coalesce.go:199: warning: destination for googleSheetsServiceAccount is a table. Ignoring non-table value
coalesce.go:199: warning: destination for resources is a table. Ignoring non-table value []
coalesce.go:199: warning: destination for credentials is a table. Ignoring non-table value
coalesce.go:199: warning: destination for credentials is a table. Ignoring non-table value
coalesce.go:160: warning: skipped value for resources: Not a table.
coalesce.go:160: warning: skipped value for googleSheetsServiceAccount: Not a table.
```

with fix:
```
coalesce.go:162: warning: skipped value for subchart1.resources: Not a table.
coalesce.go:162: warning: skipped value for subchart2.googleSheetsServiceAccount: Not a table.
coalesce.go:211: warning: destination for subchart3.aws.credentials is a table. Ignoring non-table value ()
coalesce.go:211: warning: destination for mainchart.subchart3.aws.credentials is a table. Ignoring non-table value ()
coalesce.go:211: warning: destination for mainchart.subchart2.googleSheetsServiceAccount is a table. Ignoring non-table value ()
coalesce.go:211: warning: destination for mainchart.subchart1.resources is a table. Ignoring non-table value ([])
coalesce.go:162: warning: skipped value for subchart1.resources: Not a table.
coalesce.go:162: warning: skipped value for subchart2.googleSheetsServiceAccount: Not a table.
coalesce.go:211: warning: destination for subchart3.aws.credentials is a table. Ignoring non-table value ()
```

Signed-off-by: Damien Nozay <[email protected]>

add tests

Signed-off-by: Damien Nozay <[email protected]>
(cherry picked from commit 65ec3d6)

Signed-off-by: Aram Zegerius <[email protected]>
Signed-off-by: Ankita Bhopatkar <[email protected]>
(cherry picked from commit 3fd4a11)

Signed-off-by: Aram Zegerius <[email protected]>
Signed-off-by: Ankita Bhopatkar <[email protected]>
(cherry picked from commit 752aa6d)

Signed-off-by: Zoran Krleza <[email protected]>
(cherry picked from commit 06c39c8)

Bumps [oras.land/oras-go](https://github.com/oras-project/oras-go) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/oras-project/oras-go/releases)
- [Commits](oras-project/oras-go@v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: oras.land/oras-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
(cherry picked from commit 6eee0de)