fix(deps): update module github.com/go-git/go-git/v5 to v5.16.4 (main)

[crossplane-renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/go-git/go-git/v5	require	minor	v5.13.0 -> v5.16.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

go-git/go-git (github.com/go-git/go-git/v5)

v5.16.4

Compare Source

What's Changed

• backport plumbing: format/idxfile, prevent panic by @​swills in https://github.com/go-git/go-git/pull/1732
• [backport] build: test, Fix build on Windows. by @​pjbgf in https://github.com/go-git/go-git/pull/1734
• build: Update module golang.org/x/net to v0.38.0 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] inhttps://github.com/go-git/go-git/pull/17422
• build: Update module github.com/cloudflare/circl to v1.6.1 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] inhttps://github.com/go-git/go-git/pull/17411
• build: Update module github.com/go-git/go-git/v5 to v5.13.0 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] inhttps://github.com/go-git/go-git/pull/17433

Full Changelog: go-git/go-git@v5.16.3...v5.16.4

v5.16.3

Compare Source

What's Changed

• internal: Expand regex to fix build [5.x] by @​baloo in https://github.com/go-git/go-git/pull/1644
• build: raise timeouts for windows CI tests and disable CIFuzz [5.x] by @​baloo in https://github.com/go-git/go-git/pull/1646
• plumbing: support commits extra headers, support jujutsu signed commit [5.x] by @​baloo in https://github.com/go-git/go-git/pull/1633

Full Changelog: go-git/go-git@v5.16.2...v5.16.3

v5.16.2

Compare Source

What's Changed

• utils: fix diff so subpaths work for sparse checkouts, fixes 1455 to releases/v5.x by @​kane8n in https://github.com/go-git/go-git/pull/1567

Full Changelog: go-git/go-git@v5.16.1...v5.16.2

v5.16.1

Compare Source

What's Changed

• utils: merkletrie, Fix diff on sparse-checkout index. Fixes #​1406 to releases/v5.x by @​kane8n in https://github.com/go-git/go-git/pull/1561

New Contributors

• @​kane8n made their first contribution in https://github.com/go-git/go-git/pull/1561

Full Changelog: go-git/go-git@v5.16.0...v5.16.1

v5.16.0

Compare Source

What's Changed

• [v5] plumbing: support mTLS for HTTPS protocol by @​hiddeco in https://github.com/go-git/go-git/pull/1510
• v5: plumbing: transport, Reintroduce SetHostKeyCallback. Fix #​1514 by @​pjbgf in https://github.com/go-git/go-git/pull/1515

Full Changelog: go-git/go-git@v5.15.0...v5.16.0

v5.15.0

Compare Source

What's Changed

• plumbing: add cert auth support to releases/v5.x by @​Javier-varez in https://github.com/go-git/go-git/pull/1482
• v5: Bump dependencies by @​pjbgf in https://github.com/go-git/go-git/pull/1505

Full Changelog: go-git/go-git@v5.14.0...v5.15.0

v5.14.0

Compare Source

What's Changed

• v5: Bump Go and dependencies to mitigate GO-2025-3487 by @​pjbgf in https://github.com/go-git/go-git/pull/1436

⚠️ Note that this version requires Go 1.23, due to the bump to golang.org/x/crypto@v0.35.0 which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog: go-git/go-git@v5.13.2...v5.14.0

v5.13.2

Compare Source

What's Changed

• plumbing: use the correct user agent string. Fixes #​883 by @​uragirii in https://github.com/go-git/go-git/pull/1364
• build: bump golang.org/x/sys from 0.28.0 to 0.29.0 in the golang-org group by @​dependabot in https://github.com/go-git/go-git/pull/1365
• build: bump the golang-org group with 2 updates by @​dependabot in https://github.com/go-git/go-git/pull/1367
• build: bump github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.4 by @​dependabot in https://github.com/go-git/go-git/pull/1368
• build: bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by @​dependabot in https://github.com/go-git/go-git/pull/1378
• build: bump github/codeql-action from 3.28.0 to 3.28.1 by @​dependabot in https://github.com/go-git/go-git/pull/1376
• build: bump github.com/elazarl/goproxy from 1.2.3 to 1.4.0 by @​dependabot in https://github.com/go-git/go-git/pull/1377
• git: worktree, fix restoring dot slash files (backported to v5). Fixes #​1176 by @​BeChris in https://github.com/go-git/go-git/pull/1361
• build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2 by @​dependabot in https://github.com/go-git/go-git/pull/1392
• git: worktree_status, fix adding dot slash files to working tree (backported to v5). Fixes #​1150 by @​BeChris in https://github.com/go-git/go-git/pull/1359
• build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5 by @​dependabot in https://github.com/go-git/go-git/pull/1383

Full Changelog: go-git/go-git@v5.13.1...v5.13.2

v5.13.1

Compare Source

What's Changed

• build: bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.1 by @​dependabot in https://github.com/go-git/go-git/pull/1327
• build: bump github.com/elazarl/goproxy from 1.2.1 to 1.2.2 by @​dependabot in https://github.com/go-git/go-git/pull/1329
• build: bump github.com/elazarl/goproxy from 1.2.2 to 1.2.3 by @​dependabot in https://github.com/go-git/go-git/pull/1340
• Revert "plumbing: transport/ssh, Add support for SSH @​cert-authority." by @​pjbgf in #​1346

Full Changelog: go-git/go-git@v5.13.0...v5.13.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[crossplane-renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
github.com/ProtonMail/go-crypto	v1.1.3 -> v1.1.6
github.com/cyphar/filepath-securejoin	v0.3.6 -> v0.4.1
github.com/pjbgf/sha1cd	v0.3.0 -> v0.3.2
github.com/skeema/knownhosts	v1.3.0 -> v1.3.1