Our transitive dependency on github.com/containerd/containerd and
x/crypto/openpgp was causing govulncheck failures. Bumping helm resolves
our only dependency graph routes to those packages. However, it also
bumps sigs.k8s.io/controller-runtime to v0.24.1 which included stricter
vet checks for Eventf, so this PR also fixes up instances where we call
that method without a format string arg.
Resolves the following advisories; GO-2026-5932, GO-2026-5758,
GO-2026-5475, GO-2026-5378, GO-2026-5622, GO-2026-5338, GO-2026-5064.
Updates tailscale/corp#9497
Signed-off-by: Tom Proctor <tomhjp@users.noreply.github.com>
Tom Proctor
594d5bb04e