Update module github.com/go-git/go-git/v5 to v5.14.0

[renovate-rancher]

This PR contains the following updates:

Package	Type	Update	Change
github.com/go-git/go-git/v5	require	minor	v5.13.1 -> v5.14.0

---

Release Notes

go-git/go-git (github.com/go-git/go-git/v5)

v5.14.0

Compare Source

What's Changed

• v5: Bump Go and dependencies to mitigate GO-2025-3487 by @​pjbgf in https://github.com/go-git/go-git/pull/1436

⚠️ Note that this version requires Go 1.23, due to the bump to golang.org/x/[email protected] which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog: go-git/go-git@v5.13.2...v5.14.0

v5.13.2

Compare Source

What's Changed

• plumbing: use the correct user agent string. Fixes #​883 by @​uragirii in https://github.com/go-git/go-git/pull/1364
• build: bump golang.org/x/sys from 0.28.0 to 0.29.0 in the golang-org group by @​dependabot in https://github.com/go-git/go-git/pull/1365
• build: bump the golang-org group with 2 updates by @​dependabot in https://github.com/go-git/go-git/pull/1367
• build: bump github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.4 by @​dependabot in https://github.com/go-git/go-git/pull/1368
• build: bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by @​dependabot in https://github.com/go-git/go-git/pull/1378
• build: bump github/codeql-action from 3.28.0 to 3.28.1 by @​dependabot in https://github.com/go-git/go-git/pull/1376
• build: bump github.com/elazarl/goproxy from 1.2.3 to 1.4.0 by @​dependabot in https://github.com/go-git/go-git/pull/1377
• git: worktree, fix restoring dot slash files (backported to v5). Fixes #​1176 by @​BeChris in https://github.com/go-git/go-git/pull/1361
• build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2 by @​dependabot in https://github.com/go-git/go-git/pull/1392
• git: worktree_status, fix adding dot slash files to working tree (backported to v5). Fixes #​1150 by @​BeChris in https://github.com/go-git/go-git/pull/1359
• build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5 by @​dependabot in https://github.com/go-git/go-git/pull/1383

Full Changelog: go-git/go-git@v5.13.1...v5.13.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[renovate-rancher]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated

Details:

Package	Change
github.com/google/go-cmp	v0.6.0 -> v0.7.0
github.com/ProtonMail/go-crypto	v1.1.3 -> v1.1.5
github.com/cyphar/filepath-securejoin	v0.3.6 -> v0.4.1
github.com/pjbgf/sha1cd	v0.3.0 -> v0.3.2
golang.org/x/crypto	v0.32.0 -> v0.35.0
golang.org/x/net	v0.34.0 -> v0.35.0
golang.org/x/sync	v0.10.0 -> v0.11.0