fix(deps): lock file maintenance vulnfeeds

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
		lockFileMaintenance	All locks refreshed
gcr.io/google.com/cloudsdktool/google-cloud-cli	final	digest	27813d3 -> ca70dd0
github.com/go-git/go-git/v5	require	patch	v5.16.0 -> v5.16.2
golang	stage	patch	1.24.3-alpine -> 1.24.4-alpine
golang.org/x/exp	require	digest	b6e5de4 -> dcc06ee
gopkg.in/dnaeon/go-vcr.v4	require	patch	v4.0.2 -> v4.0.3
pandas	project.dependencies	minor	==2.2.3 -> ==2.3.0

🔧 This Pull Request updates lock files to use the latest dependency versions.

---

Release Notes

go-git/go-git (github.com/go-git/go-git/v5)

v5.16.2

Compare Source

What's Changed

• utils: fix diff so subpaths work for sparse checkouts, fixes 1455 to releases/v5.x by @​kane8n in https://github.com/go-git/go-git/pull/1567

Full Changelog: go-git/go-git@v5.16.1...v5.16.2

v5.16.1

Compare Source

What's Changed

• utils: merkletrie, Fix diff on sparse-checkout index. Fixes #​1406 to releases/v5.x by @​kane8n in https://github.com/go-git/go-git/pull/1561

New Contributors

• @​kane8n made their first contribution in https://github.com/go-git/go-git/pull/1561

Full Changelog: go-git/go-git@v5.16.0...v5.16.1

dnaeon/go-vcr (gopkg.in/dnaeon/go-vcr.v4)

v4.0.3

Compare Source

What's Changed

• [cassette]: Use omitempty in yaml field serialization by @​maruel in https://github.com/dnaeon/go-vcr/pull/110
• Various test related improvements; no functional change by @​maruel in https://github.com/dnaeon/go-vcr/pull/111
• README: remove WithCassetteLabel option by @​Syuparn in https://github.com/dnaeon/go-vcr/pull/115
• cassette: wrap ErrCassetteNotFound with the number of errors by @​maruel in https://github.com/dnaeon/go-vcr/pull/117
• Fix the recorded Form field: take the full Form instead of just the PostForm by @​hectorj-thetreep in https://github.com/dnaeon/go-vcr/pull/118

New Contributors

• @​maruel made their first contribution in https://github.com/dnaeon/go-vcr/pull/110
• @​Syuparn made their first contribution in https://github.com/dnaeon/go-vcr/pull/115
• @​hectorj-thetreep made their first contribution in https://github.com/dnaeon/go-vcr/pull/118

Full Changelog: dnaeon/go-vcr@v4.0.2...v4.0.3

---

Configuration

📅 Schedule: Branch creation - "before 6am on wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ Artifact update notice

File name: vulnfeeds/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
golang.org/x/sync	v0.14.0 -> v0.15.0