Bump github.com/containers/image/v5 from 5.12.0 to 5.16.1

[dependabot]

Bumps github.com/containers/image/v5 from 5.12.0 to 5.16.1.

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.16.1

• Don't read response body twice on putSignaturesToAPIExtension failure
• build(deps): bump github.com/vbauerster/mpb/v7 from 7.1.3 to 7.1.4 ... fixing a fairly frequent hang on image copies
• Fix documentation of oci: and oci-archive:

v5.16.0

• Don't cancel a mpb.Progress using a context
• Don't recompress non-gzip data without an explicit request
• accept identity tokens from credential helpers
• Add codespell fixes
• Don't initialize a digest.Canonical.Digester if it is not necessary
• Don't compute the (compressed) digest in PutBlob if the caller provides it
• Don't call digest.Digester.Hash() on every digeringReader.Read()
• Pass OriginalDigest and UncompressedDigest to c/storage.Store.PutLayer
• Document that PutBlob callers must only provide validated digests
• Consistently compare docker.Digest with "" without Digest.String()
• Don't unnecessarily compute the blob digest in PutBlob
• copy.Options: semaphore to limit parallel pulls globally

v5.15.2

• Bump c/storage to v1.34.1

v5.15.1

• [release-5.15] v5.15.1
• [release-5.15] Bump to v5.15.2-dev

v5.15.0

• copy: move error message to debug
• copy: drop FetchPartialBlobs option
• Use http.Method* constants instead of hard-coded strings
• Use http.NewRequestWithContext() instead of http.NewRequest().WithContext()
• Note that this module requires Go 1.13
• Don't unnecessarily strip schema:// and /path from registry on search
• Don't build a map just to access one element
• Prevent simultaneous compression and decompression
• refactoring per PR comments
• Add support for decompressing while copying to dir://
• build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
• Return an actual error instead of nil when registry returns bad status code
• Reduce the dependency of pkg/compression on c/storage/pkg/chunked
• Update c/storage to v1.33.0
• Use pkg/compression/types where possible
• Add pkg/compression/types.*AlgorithmName constants
• Don't change InternalUnstableUndocumentedMIMEQuestionMark of Xz
• Fold the algorithm initializers
• Refer to compression.Gzip instead of looking it up by name
• Fix unpredictable outcome of compression.DetectCompression*
• Use quay.io in docker unit tests instead of docker.io
• Cirrus: Sync. skopeo test to skopeo repo.

... (truncated)

Commits

• d0bed1c v5.16.1
• 6fb639c Merge pull request #1383 from containers/dependabot/go_modules/github.com/con...
• 859fc93 build(deps): bump github.com/containers/storage from 1.36.0 to 1.37.0
• 1ebe336 bump containerd to v1.5.4
• 1bf5c4a Merge pull request #1378 from containers/dependabot/go_modules/github.com/kla...
• b5e4b73 build(deps): bump github.com/klauspost/compress from 1.13.5 to 1.13.6
• d47a51f Merge pull request #1374 from containers/dependabot/go_modules/github.com/con...
• 6ba6a85 Merge pull request #1375 from containers/dependabot/go_modules/github.com/vba...
• 32afea7 Merge branch 'main' into dependabot/go_modules/github.com/vbauerster/mpb/v7-7...
• bbbb1d7 Merge branch 'main' into dependabot/go_modules/github.com/containers/storage-...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #33.