fix(deps): update module github.com/go-git/go-git/v5 to v5.19.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/go-git/go-git/v5	v5.18.0 → v5.19.1

---

Release Notes

go-git/go-git (github.com/go-git/go-git/v5)

v5.19.1

Compare Source

What's Changed

• v5: plumbing: transport/ssh, Shell-quote path by @​hiddeco in #​2068
• v5: git: submodule, Fix relative URL resolution by @​hiddeco in #​2070
• v5: git: submodule, canonical remote for relative URLs by @​hiddeco in #​2074
• v5: git: submodule, error on remote without URLs by @​hiddeco in #​2078
• v5: plumbing: format/idxfile, Validate offset64 indices by @​hiddeco in #​2084
• v5: *: Reject malformed variable-length integers by @​hiddeco in #​2092
• v5: plumbing: format/packfile, Tighten delta validation by @​hiddeco in #​2091
• v5: Add worktreeFilesystem wrapper for worktree and hardening by @​hiddeco in #​2100
• v5: config: validate submodule names by @​hiddeco in #​2082
• build: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] in #​2111
• v5: git: Allow MkdirAll on worktree-root paths by @​hiddeco in #​2117
• v5: git: Stop validating symlink target paths by @​pjbgf in #​2116
• v5: plumbing: format decoder input bounds and contracts by @​hiddeco in #​2125
• plumbing: format/packfile, cap delta chain depth in parser by @​pjbgf in #​2137

Full Changelog: go-git/go-git@v5.19.0...v5.19.1

v5.19.0

Compare Source

What's Changed

• build: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] in #​2010
• v5: Bump sha1cd and go-billy by @​pjbgf in #​2060
• v5: Align object encoding with upstream by @​pjbgf in #​2065

Full Changelog: go-git/go-git@v5.18.0...v5.19.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.0 -> 1.25.0
github.com/cyphar/filepath-securejoin	v0.4.1 -> v0.6.1
github.com/go-git/go-billy/v5	v5.8.0 -> v5.9.0
github.com/pjbgf/sha1cd	v0.3.2 -> v0.6.0
golang.org/x/crypto	v0.45.0 -> v0.50.0
golang.org/x/net	v0.47.0 -> v0.53.0
golang.org/x/sys	v0.38.0 -> v0.43.0
golang.org/x/text	v0.31.0 -> v0.36.0

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.46%. Comparing base (8adfe47) to head (40e48c0).

Additional details and impacted files

@@           Coverage Diff           @@
##             main      #43   +/-   ##
=======================================
  Coverage   97.46%   97.46%           
=======================================
  Files           5        5           
  Lines         158      158           
=======================================
  Hits          154      154           
  Misses          2        2           
  Partials        2        2           

Flag	Coverage Δ
unittests	97.46% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.