fix(deps): update all non-major dependencies

[renovate-coveooss]

Jira: DT-4929

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Adoption	Passing	Confidence
actions/checkout	action	minor	v4.2.2 -> v4.3.0
github.com/bmatcuk/doublestar/v4	require	patch	v4.9.0 -> v4.9.1
github.com/go-git/go-git/v5	require	patch	v5.16.2 -> v5.16.3
github.com/stretchr/testify	require	minor	v1.10.0 -> v1.11.1
go (source)	toolchain	minor	1.24.5 -> 1.25.1	1.25.2
golang.org/x/term	require	minor	v0.33.0 -> v0.35.0
golang.org/x/text	require	minor	v0.27.0 -> v0.29.0
step-security/harden-runner	action	patch	v2.13.0 -> v2.13.1

[skip release]

---

Release Notes

actions/checkout (actions/checkout)

v4.3.0

Compare Source

What's Changed

• docs: update README.md by @​motss in https://github.com/actions/checkout/pull/1971
• Add internal repos for checking out multiple repositories by @​mouismail in https://github.com/actions/checkout/pull/1977
• Documentation update - add recommended permissions to Readme by @​benwells in https://github.com/actions/checkout/pull/2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in https://github.com/actions/checkout/pull/2044
• Update README.md by @​nebuk89 in https://github.com/actions/checkout/pull/2194
• Update CODEOWNERS for actions by @​TingluoHuang in https://github.com/actions/checkout/pull/2224
• Update package dependencies by @​salmanmkc in https://github.com/actions/checkout/pull/2236
• Prepare release v4.3.0 by @​salmanmkc in https://github.com/actions/checkout/pull/2237

New Contributors

• @​motss made their first contribution in https://github.com/actions/checkout/pull/1971
• @​mouismail made their first contribution in https://github.com/actions/checkout/pull/1977
• @​benwells made their first contribution in https://github.com/actions/checkout/pull/2043
• @​nebuk89 made their first contribution in https://github.com/actions/checkout/pull/2194
• @​salmanmkc made their first contribution in https://github.com/actions/checkout/pull/2236

Full Changelog: actions/checkout@v4...v4.3.0

bmatcuk/doublestar (github.com/bmatcuk/doublestar/v4)

v4.9.1: Small Performance Change

Compare Source

This release contains a small change that gives a slight performance increase. Thanks to @​jbedard for the PR!

What's Changed

• perf: reduce string construction in isZeroLengthPattern by @​jbedard in https://github.com/bmatcuk/doublestar/pull/107

New Contributors

• @​jbedard made their first contribution in https://github.com/bmatcuk/doublestar/pull/107

Full Changelog: bmatcuk/doublestar@v4.9.0...v4.9.1

go-git/go-git (github.com/go-git/go-git/v5)

v5.16.3

Compare Source

What's Changed

• internal: Expand regex to fix build [5.x] by @​baloo in https://github.com/go-git/go-git/pull/1644
• build: raise timeouts for windows CI tests and disable CIFuzz [5.x] by @​baloo in https://github.com/go-git/go-git/pull/1646
• plumbing: support commits extra headers, support jujutsu signed commit [5.x] by @​baloo in https://github.com/go-git/go-git/pull/1633

Full Changelog: go-git/go-git@v5.16.2...v5.16.3

stretchr/testify (github.com/stretchr/testify)

v1.11.1

Compare Source

This release fixes #​1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

• Backport #​1786 to release/1.11: mock: revert to pre-v1.11.0 argument matching behavior for mutating stringers by @​brackendawson in https://github.com/stretchr/testify/pull/1788

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

Compare Source

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

• Call stack perf change for CallerInfo by @​mikeauclair in https://github.com/stretchr/testify/pull/1614
• Lazily render mock diff output on successful match by @​mikeauclair in https://github.com/stretchr/testify/pull/1615
• assert: check early in Eventually, EventuallyWithT, and Never by @​cszczepaniak in https://github.com/stretchr/testify/pull/1427
• assert: add IsNotType by @​bartventer in https://github.com/stretchr/testify/pull/1730
• assert.JSONEq: shortcut if same strings by @​dolmen in https://github.com/stretchr/testify/pull/1754
• assert.YAMLEq: shortcut if same strings by @​dolmen in https://github.com/stretchr/testify/pull/1755
• assert: faster and simpler isEmpty using reflect.Value.IsZero by @​dolmen in https://github.com/stretchr/testify/pull/1761
• suite: faster methods filtering (internal refactor) by @​dolmen in https://github.com/stretchr/testify/pull/1758

Fixes

• assert.ErrorAs: log target type by @​craig65535 in https://github.com/stretchr/testify/pull/1345
• Fix failure message formatting for Positive and Negative asserts in https://github.com/stretchr/testify/pull/1062
• Improve ErrorIs message when error is nil but an error was expected by @​tsioftas in https://github.com/stretchr/testify/pull/1681
• fix Subset/NotSubset when calling with mixed input types by @​siliconbrain in https://github.com/stretchr/testify/pull/1729
• Improve ErrorAs failure message when error is nil by @​ccoVeille in https://github.com/stretchr/testify/pull/1734
• mock.AssertNumberOfCalls: improve error msg by @​3scalation in https://github.com/stretchr/testify/pull/1743

Documentation, Build & CI

• docs: Fix typo in README by @​alexandear in https://github.com/stretchr/testify/pull/1688
• Replace deprecated io/ioutil with io and os by @​alexandear in https://github.com/stretchr/testify/pull/1684
• Document consequences of calling t.FailNow() by @​greg0ire in https://github.com/stretchr/testify/pull/1710
• chore: update docs for Unset #​1621 by @​techfg in https://github.com/stretchr/testify/pull/1709
• README: apply gofmt to examples by @​alexandear in https://github.com/stretchr/testify/pull/1687
• refactor: use %q and %T to simplify fmt.Sprintf by @​alexandear in https://github.com/stretchr/testify/pull/1674
• Propose Christophe Colombier (ccoVeille) as approver by @​brackendawson in https://github.com/stretchr/testify/pull/1716
• Update documentation for the Error function in assert or require package by @​architagr in https://github.com/stretchr/testify/pull/1675
• assert: remove deprecated build constraints by @​alexandear in https://github.com/stretchr/testify/pull/1671
• assert: apply gofumpt to internal test suite by @​ccoVeille in https://github.com/stretchr/testify/pull/1739
• CI: fix shebang in .ci.*.sh scripts by @​dolmen in https://github.com/stretchr/testify/pull/1746
• assert,require: enable parallel testing on (almost) all top tests by @​dolmen in https://github.com/stretchr/testify/pull/1747
• suite.Passed: add one more status test report by @​Ararsa-Derese in https://github.com/stretchr/testify/pull/1706
• Add Helper() method in internal mocks and assert.CollectT by @​dolmen in https://github.com/stretchr/testify/pull/1423
• assert.Same/NotSame: improve usage of Sprintf by @​ccoVeille in https://github.com/stretchr/testify/pull/1742
• mock: enable parallel testing on internal testsuite by @​dolmen in https://github.com/stretchr/testify/pull/1756
• suite: cleanup use of 'testing' internals at runtime by @​dolmen in https://github.com/stretchr/testify/pull/1751
• assert: check test failure message for Empty and NotEmpty by @​ccoVeille in https://github.com/stretchr/testify/pull/1745
• deps: fix dependency cycle with objx (again) by @​dolmen in https://github.com/stretchr/testify/pull/1567
• assert.Empty: comprehensive doc of "Empty"-ness rules by @​dolmen in https://github.com/stretchr/testify/pull/1753
• doc: improve godoc of top level 'testify' package by @​dolmen in https://github.com/stretchr/testify/pull/1760
• assert.ErrorAs: simplify retrieving the type name by @​ccoVeille in https://github.com/stretchr/testify/pull/1740
• assert.EqualValues: improve test coverage to 100% by @​dolmen in https://github.com/stretchr/testify/pull/1763
• suite.Run: simplify running of Setup/TeardownSuite by @​renzoarreaza in https://github.com/stretchr/testify/pull/1769
• assert.CallerInfo: micro optimization by using LastIndexByte by @​dolmen in https://github.com/stretchr/testify/pull/1767
• assert.CallerInfo: micro cleanup by @​dolmen in https://github.com/stretchr/testify/pull/1768
• assert: refactor TestFileExists and TestDirExists tests to enable parallel testing by @​dolmen in https://github.com/stretchr/testify/pull/1766
• suite.Run: refactor handling of stats for improved readability by @​dolmen in https://github.com/stretchr/testify/pull/1764
• tests: improve captureTestingT helper by @​ccoVeille in https://github.com/stretchr/testify/pull/1741
• build(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] inhttps://github.com/stretchr/testify/pull/17788

New Contributors

• @​greg0ire made their first contribution in https://github.com/stretchr/testify/pull/1710
• @​techfg made their first contribution in https://github.com/stretchr/testify/pull/1709
• @​mikeauclair made their first contribution in https://github.com/stretchr/testify/pull/1614
• @​cszczepaniak made their first contribution in https://github.com/stretchr/testify/pull/1427
• @​architagr made their first contribution in https://github.com/stretchr/testify/pull/1675
• @​tsioftas made their first contribution in https://github.com/stretchr/testify/pull/1681
• @​siliconbrain made their first contribution in https://github.com/stretchr/testify/pull/1729
• @​bartventer made their first contribution in https://github.com/stretchr/testify/pull/1730
• @​Ararsa-Derese made their first contribution in https://github.com/stretchr/testify/pull/1706
• @​renzoarreaza made their first contribution in https://github.com/stretchr/testify/pull/1769
• @​3scalation made their first contribution in https://github.com/stretchr/testify/pull/1743

Full Changelog: stretchr/testify@v1.10.0...v1.11.0

step-security/harden-runner (step-security/harden-runner)

v2.13.1

Compare Source

What's Changed

• Graceful handling of HTTP errors: Improved error handling when fetching Harden Runner policies from the StepSecurity Policy Store API, ensuring more reliable execution even in case of temporary network/API issues.

• Security updates for npm dependencies: Updated vulnerable npm package dependencies to the latest secure versions.

• Faster enterprise agent downloads: The enterprise agent is now downloaded from GitHub Releases instead of packages.stepsecurity.io, improving download speed and reliability.

Full Changelog: step-security/harden-runner@v2.13.0...v2.13.1

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone America/Toronto, Automerge - "after 9:00am and before 12:00pm on tuesday, wednesday, thursday" in timezone America/Toronto.

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[renovate-coveooss]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
golang.org/x/sys	v0.34.0 -> v0.36.0