chore(deps): Bump github.com/google/go-tpm-tools from 0.4.9 to 0.4.10

[dependabot]

Bumps github.com/google/go-tpm-tools from 0.4.9 to 0.4.10.

Release notes

Sourced from github.com/google/go-tpm-tools's releases.

v0.4.10

Upgraded Go version to 1.26. Contains minor fixes and patches to ./server and ./client. Add TDX CCEL support to './cmd' token command. Majority of changes are related to ./launcher and shouldn't affect other packages in this repo.

What's Changed

• Add GetKeyEndorsement gRPC call to teeserver by @​yawangwang in google/go-tpm-tools#811
• Implement graceful shutdown on power button event. by @​susienme in google/go-tpm-tools#756
• Remove file check for hardened image by @​mayafleischer in google/go-tpm-tools#832
• [launcher] skip GCA creation error by @​jkl73 in google/go-tpm-tools#834
• Integrate TEE server with WSD for binding key claims in BC Mode by @​meetrajvala in google/go-tpm-tools#831
• bc-guest: apply security hardening by @​rkolchmeyer in google/go-tpm-tools#840
• [launcher] add gpu support for bc guest by @​jkl73 in google/go-tpm-tools#828
• [launcher] remove ttys0 from hardened bc image by @​jkl73 in google/go-tpm-tools#842
• update nic irq affinity and pin numa nodes for GPUs, NICs, and bridges by @​gjacobwells in google/go-tpm-tools#846
• [launcher] update gpu driver in bc to 595.58.03 by @​jkl73 in google/go-tpm-tools#847
• update attestationEvidence partial responses by @​ballesterosa in google/go-tpm-tools#848
• Update logging of Env in launch_spec and container_runner by @​lindsayzad in google/go-tpm-tools#838
• add rfs configuration to network optimizaitions by @​gjacobwells in google/go-tpm-tools#851
• Fix wrong test dependency in the log redirection test by @​susienme in google/go-tpm-tools#852
• launcher: Pin Google CA in GCP TLS connections by @​brongan in google/go-tpm-tools#825
• [launcher] update base cos to 125-19216-395-138 by @​jkl73 in google/go-tpm-tools#854
• launcher: refactor NewRunner to use a RunnerConfig struct by @​brongan in google/go-tpm-tools#855
• Update measure.sh to better handle args by @​jkl73 in google/go-tpm-tools#858
• Best practices - prevent deadlock on runSystemCmd by @​lindsayzad in google/go-tpm-tools#849
• Pass in ctx rather than creating new one by @​lindsayzad in google/go-tpm-tools#859
• [Launcher] Abstract GPU driver setup into bc_gpu_setup.sh by @​Sibcgh in google/go-tpm-tools#857
• remove invalid token from error message by @​lindsayzad in google/go-tpm-tools#861
• Implement structured Cloud logging by @​Sibcgh in google/go-tpm-tools#595
• launcher: refactor logging interface and use explicit dependency inje… by @​brongan in google/go-tpm-tools#856
• logging: add missing io import in tests by @​brongan in google/go-tpm-tools#864
• launcher: dependency inject TPM and mount verifier by @​brongan in google/go-tpm-tools#863
• launcher: eliminate package-level global state in main.go by @​brongan in google/go-tpm-tools#862
• launcher: enable unit testing for ContainerRunner creation by @​brongan in google/go-tpm-tools#865
• launcher: move helper functions to start.go by @​brongan in google/go-tpm-tools#869
• [launcher] Update socket permission, update base image by @​jkl73 in google/go-tpm-tools#875
• Update KPS container image reference by @​meetrajvala in google/go-tpm-tools#876
• [launcher] Update and verify socket permissions by @​jkl73 in google/go-tpm-tools#877
• launcher: dependency inject container image into ContainerRunner by @​brongan in google/go-tpm-tools#874
• Unpack guest-gpu-tools:latest onto OEM partition by @​rkolchmeyer in google/go-tpm-tools#872
• [launcher/image/measure] Add support for measuring nested VM images in host images by @​Sibcgh in google/go-tpm-tools#871
• launcher: wait for containerd task IO to drain on exit by @​brongan in google/go-tpm-tools#882
• launcher: parallelize GCE image export steps in cloudbuild.yaml by @​brongan in google/go-tpm-tools#881
• launcher: refactor monolithic NewRunner initialization into StartLauncher by @​brongan in google/go-tpm-tools#866
• Add 128GB of hugetlbfs, in respone to customer request. by @​gjacobwells in google/go-tpm-tools#884
• launcher: extract OCI spec options construction for unit testing by @​brongan in google/go-tpm-tools#879
• launcher: set 10s polling interval on gcloud builds submit by @​brongan in google/go-tpm-tools#889
• launcher: parallelize test_mounts.yaml execution by @​brongan in google/go-tpm-tools#878
• launcher: parallelize LogOverride tests by @​brongan in google/go-tpm-tools#880

... (truncated)

Commits

• 1cd8807 verifier: fix potential runtime panics (#992)
• 88d375c agent: fix potential race condition (#993)
• 0134f26 Add nil/length checks to avoid runtime panics, only log envvar name, and add ...
• 773a15c Update bcagent and add host RoT (#986)
• bcce07e server: fix AES-256 IV size, validate AK attributes, and fix state conversion...
• 6dccb17 update confidential_space import (#989)
• 641531f internal: fix body leak in cert fetcher and bounds issues in PCR helpers (#984)
• da47108 Update generated attest.pb.go for attestation.proto change (#988)
• ee8ec5b Add TDX CCEL support to token command and refactor flags (#620)
• 66305c6 Remove dead init code in build.rs, update integration tests to use tmp dirs, ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)