bump moby to '[email protected]+incompatible', which looks to be the forma…

…t needed in the 'replaces' section to remediate this CVE

Signed-off-by: Mark McCormick <[email protected]>

kubevela.yaml

@@ -31,8 +31,8 @@ pipeline:
 
   - uses: go/bump
     with:
-      deps: github.com/containerd/[email protected] github.com/cloudflare/[email protected] go.opentelemetry.io/contrib/instrumentation/net/http/[email protected] go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/[email protected] go.opentelemetry.io/otel/exporters/otlp/otlptrace/[email protected] github.com/fluxcd/source-controller/[email protected] oras.land/[email protected] golang.org/x/[email protected] github.com/hashicorp/[email protected] github.com/moby/moby@v26.0.0
-      replaces: github.com/go-git/go-git/v5=github.com/go-git/go-git/[email protected] github.com/docker/docker=github.com/moby/moby@v26.0.0
+      deps: github.com/containerd/[email protected] github.com/cloudflare/[email protected] go.opentelemetry.io/contrib/instrumentation/net/http/[email protected] go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/[email protected] go.opentelemetry.io/otel/exporters/otlp/otlptrace/[email protected] github.com/fluxcd/source-controller/[email protected] oras.land/[email protected] golang.org/x/[email protected] github.com/hashicorp/[email protected] github.com/moby/moby@v26.1.0
+      replaces: github.com/go-git/go-git/v5=github.com/go-git/go-git/[email protected] github.com/docker/docker=github.com/moby/moby@v26.1.0+incompatible
 
   - uses: go/build
     with: