fix(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/dependency-review-action	action	major	v4.9.0 → v5.0.0
github.com/go-git/go-billy/v6	require	patch	v6.0.0-20260505113209-2b60adf67f98 → v6.0.0-20260507215541-8db9859ba260
github.com/sirupsen/logrus	require	digest	6878cb3 → d4a5065
golang.org/x/crypto	require	minor	v0.50.0 → v0.51.0
golang.org/x/mod	require	minor	v0.35.0 → v0.36.0
golang.org/x/sys	require	minor	v0.43.1-0.20260423153702-fb1facd76f95 → v0.44.0
golang.org/x/term	require	minor	v0.42.0 → v0.43.0
golang.org/x/tools	require	minor	v0.44.0 → v0.45.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

v5.0.0: 5.0.0

Compare Source

This is a new major version of the Dependency Review Action which updates the runtime to node24. This requires a minimum Actions Runner version v2.327.1 to run.

What's Changed

• Add .github/copilot-instructions.md for Copilot coding agent by @​ahpook in #​1067
• Update Node.js runtime from 20 to 24 by @​scottschreckengaust in #​1084
• Bump spdx-license-ids from 3.0.20 to 3.0.23 by @​mongolyy in #​1091
• docs: bump actions/checkout from v4 to v6 in workflow examples by @​Marukome0743 in #​1077
• fix: patched version display for advisories with non-strict semver ranges (e.g. Maven beta versions) by @​tspascoal in #​1076
• Resolve security findings by @​AshelyTC in #​1094
• v5.0.0 release branch by @​ahpook in #​1098

New Contributors

• @​scottschreckengaust made their first contribution in #​1084
• @​mongolyy made their first contribution in #​1091
• @​Marukome0743 made their first contribution in #​1077

Full Changelog: actions/dependency-review-action@v4.9.0...v5.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang/​golang.org/​x/​crypto@​v0.50.0 ⏵ v0.51.0
	golang/​golang.org/​x/​tools@​v0.44.0 ⏵ v0.45.0	+1
	golang/​golang.org/​x/​sys@​v0.43.1-0.20260423153702-fb1facd76f95 ⏵ v0.44.0
	golang/​golang.org/​x/​mod@​v0.35.0 ⏵ v0.36.0	+1
	golang/​github.com/​sirupsen/​logrus@​v1.9.5-0.20260426203557-6878cb36b029 ⏵ v1.9.5-0.20260508084601-d4a50659cfd6
	golang/​github.com/​go-git/​go-billy/​v6@​v6.0.0-20260505113209-2b60adf67f98 ⏵ v6.0.0-20260507215541-8db9859ba260	+1
	golang/​golang.org/​x/​term@​v0.42.0 ⏵ v0.43.0

View full report

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated

Details:

Package	Change
golang.org/x/net	v0.53.0 -> v0.54.0
golang.org/x/telemetry	v0.0.0-20260409153401-be6f6cb8b1fa -> v0.0.0-20260508192327-42602be52be6
golang.org/x/text	v0.36.0 -> v0.37.0