fix(deps): update go-git, golang.org/x/crypto, & golang.org/x/net to …

…resolve Dependabot alerts (#608)

Closes #606 

Bumps the go_modules group with 3 updates:
[github.com/go-git/go-git/v5](https://github.com/go-git/go-git),
[golang.org/x/crypto](https://github.com/golang/crypto) and
[golang.org/x/net](https://github.com/golang/net).

Updates `github.com/go-git/go-git/v5` from 5.12.0 to 5.13.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's
releases</a>.</em></p>
<blockquote>
<h2>v5.13.0</h2>
<h2>What's Changed</h2>
<ul>
<li>build: bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 in
/cli/go-git by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1065">go-git/go-git#1065</a></li>
<li>build: bump golang.org/x/net from 0.22.0 to 0.23.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1068">go-git/go-git#1068</a></li>
<li>build: bump golang.org/x/net from 0.23.0 to 0.24.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1071">go-git/go-git#1071</a></li>
<li>Properly support skipping of non-mandatory extensions by <a
href="https://github.com/codablock"><code>@​codablock</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1066">go-git/go-git#1066</a></li>
<li>git: Refine some codes in test and non-test. by <a
href="https://github.com/onee-only"><code>@​onee-only</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1077">go-git/go-git#1077</a></li>
<li>plumbing: protocol/packp, client-side filter capability support by
<a href="https://github.com/edigaryev"><code>@​edigaryev</code></a> in
<a
href="https://redirect.github.com/go-git/go-git/pull/1000">go-git/go-git#1000</a></li>
<li>build: bump golang.org/x/net from 0.22.0 to 0.23.0 in /cli/go-git by
<a href="https://github.com/dependabot"><code>@​dependabot</code></a> in
<a
href="https://redirect.github.com/go-git/go-git/pull/1078">go-git/go-git#1078</a></li>
<li>plumbing: fix sideband demux on flush by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1084">go-git/go-git#1084</a></li>
<li>storage: dotgit, head reference usually comes first by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1085">go-git/go-git#1085</a></li>
<li>build: bump golang.org/x/text from 0.14.0 to 0.15.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1091">go-git/go-git#1091</a></li>
<li>build: bump golang.org/x/crypto from 0.22.0 to 0.23.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1094">go-git/go-git#1094</a></li>
<li>build: bump golang.org/x/net from 0.24.0 to 0.25.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1093">go-git/go-git#1093</a></li>
<li>git: Added an example for Repository.Branches by <a
href="https://github.com/johnmatthiggins"><code>@​johnmatthiggins</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1088">go-git/go-git#1088</a></li>
<li>git: worktree_commit, Modify checking empty commit. Fixes <a
href="https://redirect.github.com/go-git/go-git/issues/723">#723</a> by
<a href="https://github.com/onee-only"><code>@​onee-only</code></a> in
<a
href="https://redirect.github.com/go-git/go-git/pull/1050">go-git/go-git#1050</a></li>
<li>plumbing: transport/http, Wrap http errors to return reason. Fixes
<a
href="https://redirect.github.com/go-git/go-git/issues/1097">#1097</a>
by <a href="https://github.com/ggambetti"><code>@​ggambetti</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1100">go-git/go-git#1100</a></li>
<li>build: bump golang.org/x/sys from 0.20.0 to 0.21.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1106">go-git/go-git#1106</a></li>
<li>build: bump golang.org/x/text from 0.15.0 to 0.16.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1107">go-git/go-git#1107</a></li>
<li>Bumps Go versions and go-billy by <a
href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1056">go-git/go-git#1056</a></li>
<li>_examples: Fixed a dead link COMPATIBILITY.md by <a
href="https://github.com/gecko655"><code>@​gecko655</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1109">go-git/go-git#1109</a></li>
<li>build: bump github.com/jessevdk/go-flags from 1.5.0 to 1.6.1 in
/cli/go-git by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1115">go-git/go-git#1115</a></li>
<li>build: bump github.com/elazarl/goproxy from
v0.0.0-20230808193330-2592e75ae04a to v0.0.0-20240618083138-03be62527ccb
by <a href="https://github.com/hbelmiro"><code>@​hbelmiro</code></a> in
<a
href="https://redirect.github.com/go-git/go-git/pull/1124">go-git/go-git#1124</a></li>
<li>build: bump golang.org/x/net from 0.25.0 to 0.26.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1104">go-git/go-git#1104</a></li>
<li>Add option approximating <code>git clean -x</code> flag. by <a
href="https://github.com/msuozzo"><code>@​msuozzo</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/995">go-git/go-git#995</a></li>
<li>Revert &quot;Add option approximating <code>git clean -x</code>
flag.&quot; by <a
href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1129">go-git/go-git#1129</a></li>
<li>Fix reference updated concurrently error for the filesystem storer
by <a
href="https://github.com/Javier-varez"><code>@​Javier-varez</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1116">go-git/go-git#1116</a></li>
<li>build: bump golang.org/x/net from 0.26.0 to 0.27.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1134">go-git/go-git#1134</a></li>
<li>utils: merkletrie, Align error message with upstream by <a
href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1142">go-git/go-git#1142</a></li>
<li>plumbing: transport/file, Change paths to absolute by <a
href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1141">go-git/go-git#1141</a></li>
<li>plumbing: gitignore, Fix loading of ignored .gitignore files. by <a
href="https://github.com/Achilleshiel"><code>@​Achilleshiel</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1114">go-git/go-git#1114</a></li>
<li>build: bump github.com/skeema/knownhosts from 1.2.2 to 1.3.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1147">go-git/go-git#1147</a></li>
<li>plumbing: transport/ssh, Add support for SSH <a
href="https://github.com/cert-authority"><code>@​cert-authority</code></a>.
by <a
href="https://github.com/Javier-varez"><code>@​Javier-varez</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1157">go-git/go-git#1157</a></li>
<li>build: run example tests during CI workflow by <a
href="https://github.com/crazybolillo"><code>@​crazybolillo</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1030">go-git/go-git#1030</a></li>
<li>storage: filesystem, Fix object cache not working due to
uninitialised objects being put into cache by <a
href="https://github.com/SatelliteMind"><code>@​SatelliteMind</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1138">go-git/go-git#1138</a></li>
<li>git: Fix fetching missing commits by <a
href="https://github.com/AriehSchneier"><code>@​AriehSchneier</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1032">go-git/go-git#1032</a></li>
<li>plumbing: format/packfile, remove duplicate checks in findMatch() by
<a href="https://github.com/edigaryev"><code>@​edigaryev</code></a> in
<a
href="https://redirect.github.com/go-git/go-git/pull/1152">go-git/go-git#1152</a></li>
<li>git: worktree, Fix file reported as <code>Untracked</code> while it
is committed by <a
href="https://github.com/rodrigocam"><code>@​rodrigocam</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1023">go-git/go-git#1023</a></li>
<li>build: bump golang.org/x/sys from 0.22.0 to 0.23.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1160">go-git/go-git#1160</a></li>
<li>plumbing: filemode, Remove check for setting size of .git/index file
by <a
href="https://github.com/nicholasSUSE"><code>@​nicholasSUSE</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1159">go-git/go-git#1159</a></li>
<li>build: bump golang.org/x/net from 0.27.0 to 0.28.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1163">go-git/go-git#1163</a></li>
<li>Fix some lint warning and increase stalebot to 180 days by <a
href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1128">go-git/go-git#1128</a></li>
<li>adjust path extracted from file: url on Windows by <a
href="https://github.com/tomqwpl"><code>@​tomqwpl</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/416">go-git/go-git#416</a></li>
<li>build: bump golang.org/x/sys from 0.23.0 to 0.24.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1164">go-git/go-git#1164</a></li>
<li>Add RestoreStaged to Worktree that mimics the behaviour of git
restore --staged <!-- raw HTML omitted -->... by <a
href="https://github.com/ben-tbotlabs"><code>@​ben-tbotlabs</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/493">go-git/go-git#493</a></li>
<li>plumbing: signature, support the same x509 signature formats as git
by <a href="https://github.com/yoavamit"><code>@​yoavamit</code></a> in
<a
href="https://redirect.github.com/go-git/go-git/pull/1169">go-git/go-git#1169</a></li>
<li>fix: allow discovery of non bare repos in fsLoader by <a
href="https://github.com/jakobmoellerdev"><code>@​jakobmoellerdev</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1170">go-git/go-git#1170</a></li>
<li>build: bump golang.org/x/sys from 0.24.0 to 0.25.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1178">go-git/go-git#1178</a></li>
<li>build: bump golang.org/x/text from 0.17.0 to 0.18.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1179">go-git/go-git#1179</a></li>
<li>build: bump golang.org/x/net from 0.28.0 to 0.29.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1184">go-git/go-git#1184</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/go-git/go-git/commit/94bd4af1deb15a64e90c6287eaf9e9f09b192a1f"><code>94bd4af</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/1261">#1261</a>
from BeChris/issue680</li>
<li><a
href="https://github.com/go-git/go-git/commit/8b7f5ba6f0cade1a25c5c4ca9e4d07a95c639945"><code>8b7f5ba</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/1262">#1262</a>
from go-git/dependabot/go_modules/github.com/elazarl...</li>
<li><a
href="https://github.com/go-git/go-git/commit/41d80a059a481d4c623bc8185c41ce82ed8ce985"><code>41d80a0</code></a>
build: bump github.com/elazarl/goproxy</li>
<li><a
href="https://github.com/go-git/go-git/commit/499814044f111480b2a17a07c5a7a4c523ce5b87"><code>4998140</code></a>
git: worktree_commit, sanitize author and commiter name and email before
crea...</li>
<li><a
href="https://github.com/go-git/go-git/commit/9049625b98bd05edb9f1d00e7ff5da763afc0745"><code>9049625</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/1260">#1260</a>
from go-git/dependabot/github_actions/github/codeql-...</li>
<li><a
href="https://github.com/go-git/go-git/commit/dae48b4340d1cc6b562ade40b54049584075991f"><code>dae48b4</code></a>
build: bump github/codeql-action from 3.27.9 to 3.28.0</li>
<li><a
href="https://github.com/go-git/go-git/commit/7d6fbc2c2a05eb6327b298b816bc0c4f854820a6"><code>7d6fbc2</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/1220">#1220</a>
from BeChris/accept_uppercase_hexa_in_pktline_length</li>
<li><a
href="https://github.com/go-git/go-git/commit/62a77b7d343dc1ed08d1d691efa13d81788cbc29"><code>62a77b7</code></a>
plumbing: Fix invalid reference name error while cloning branches
containing ...</li>
<li><a
href="https://github.com/go-git/go-git/commit/5e11196652708f339737b31bf9639373610dd7d1"><code>5e11196</code></a>
plumbing: format/pktline, accept upercase hexadecimal value as pktline
length...</li>
<li><a
href="https://github.com/go-git/go-git/commit/65f5e1ade083cfabacc2de4aaa68f7880e22b642"><code>65f5e1a</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/1256">#1256</a>
from go-git/dependabot/go_modules/golang-org-232a611e2d</li>
<li>Additional commits viewable in <a
href="https://github.com/go-git/go-git/compare/v5.12.0...v5.13.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `golang.org/x/crypto` from 0.26.0 to 0.31.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/crypto/commit/b4f1988a35dee11ec3e05d6bf3e90b695fbd8909"><code>b4f1988</code></a>
ssh: make the public key cache a 1-entry FIFO cache</li>
<li><a
href="https://github.com/golang/crypto/commit/7042ebcbe097f305ba3a93f9a22b4befa4b83d29"><code>7042ebc</code></a>
openpgp/clearsign: just use rand.Reader in tests</li>
<li><a
href="https://github.com/golang/crypto/commit/3e90321ac7bcee3d924ed63ed3ad97be2079cb56"><code>3e90321</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/crypto/commit/8c4e668694ccbaa1be4785da7e7a40f2ef93152b"><code>8c4e668</code></a>
x509roots/fallback: update bundle</li>
<li><a
href="https://github.com/golang/crypto/commit/6018723c74059e3b91c84268b212c2f6cdab1f64"><code>6018723</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/crypto/commit/71ed71b4faf97caafd1863fed003e9ac311f10ee"><code>71ed71b</code></a>
README: don't recommend go get</li>
<li><a
href="https://github.com/golang/crypto/commit/750a45fe5e473d5afa193e9088f3d135e64eca26"><code>750a45f</code></a>
sha3: add MarshalBinary, AppendBinary, and UnmarshalBinary</li>
<li><a
href="https://github.com/golang/crypto/commit/36b172546bd03a74c79e109ec84c599b672ea9e4"><code>36b1725</code></a>
sha3: avoid trailing permutation</li>
<li><a
href="https://github.com/golang/crypto/commit/80ea76eb17c0c52f5d5d04e833d6aeb6b062d81d"><code>80ea76e</code></a>
sha3: fix padding for long cSHAKE parameters</li>
<li><a
href="https://github.com/golang/crypto/commit/c17aa50fbd32393e5d52fa65ca51cbfff0a75aea"><code>c17aa50</code></a>
sha3: avoid buffer copy</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/crypto/compare/v0.26.0...v0.31.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `golang.org/x/net` from 0.28.0 to 0.33.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/net/commit/dfc720dfe0cfc125116068c20efcdcb5e4eab464"><code>dfc720d</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/net/commit/8e66b04771e35c4e4125e8c60334b34e2423effb"><code>8e66b04</code></a>
html: use strings.EqualFold instead of lowering ourselves</li>
<li><a
href="https://github.com/golang/net/commit/b935f7b5d723c82894e1a1fd936a94dd2d1eae46"><code>b935f7b</code></a>
html: avoid endless loop on error token</li>
<li><a
href="https://github.com/golang/net/commit/9af49ef148d7d8b3e4cbbd9cc0cd37f2a520a4a3"><code>9af49ef</code></a>
route: remove unused sizeof* consts</li>
<li><a
href="https://github.com/golang/net/commit/6705db9a4df8f2cf16aed83e773e7a0213788b7a"><code>6705db9</code></a>
quic: clean up crypto streams when dropping packet protection keys</li>
<li><a
href="https://github.com/golang/net/commit/4ef7588d2b3f83775099797baac43c34e2e23200"><code>4ef7588</code></a>
quic: handle ACK frame in packet which drops number space</li>
<li><a
href="https://github.com/golang/net/commit/552d8ac903a11a9fde71a88732f5b58b6b394178"><code>552d8ac</code></a>
Revert &quot;route: change from syscall to x/sys/unix&quot;</li>
<li><a
href="https://github.com/golang/net/commit/13a7c0108bd38aad013797cdb95e6bfca0bbcec6"><code>13a7c01</code></a>
Revert &quot;route: remove unused sizeof* consts on freebsd&quot;</li>
<li><a
href="https://github.com/golang/net/commit/285e1cf6650f407805ea8af9255624961b768479"><code>285e1cf</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/net/commit/d0a1049b7e05d3d6f62570a8381a22301a97ae73"><code>d0a1049</code></a>
route: remove unused sizeof* consts on freebsd</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/net/compare/v0.28.0...v0.33.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/getoutreach/gobox/network/alerts).

</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

go.mod

@@ -15,8 +15,8 @@ require (
 	github.com/davecgh/go-spew v1.1.1
 	github.com/fatih/color v1.17.0
 	github.com/fynelabs/selfupdate v0.2.0
-	github.com/go-git/go-billy/v5 v5.5.0
-	github.com/go-git/go-git/v5 v5.12.0
+	github.com/go-git/go-billy/v5 v5.6.0
+	github.com/go-git/go-git/v5 v5.13.0
 	github.com/go-logr/logr v1.4.2
 	github.com/google/go-cmp v0.6.0
 	github.com/google/go-github/v62 v62.0.0
@@ -42,10 +42,10 @@ require (
 	go.opentelemetry.io/otel/metric v1.29.0
 	go.opentelemetry.io/otel/sdk v1.28.0
 	go.opentelemetry.io/otel/trace v1.29.0
-	golang.org/x/crypto v0.26.0
+	golang.org/x/crypto v0.31.0
 	golang.org/x/oauth2 v0.22.0
-	golang.org/x/sync v0.8.0
-	golang.org/x/term v0.24.0
+	golang.org/x/sync v0.10.0
+	golang.org/x/term v0.27.0
 	golang.org/x/tools v0.24.0
 	gopkg.in/yaml.v3 v3.0.1
 	gotest.tools/v3 v3.5.1
@@ -57,23 +57,23 @@ require (
 	github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
 	github.com/charmbracelet/x/ansi v0.1.4 // indirect
 	github.com/cloudflare/circl v1.3.7 // indirect
-	github.com/cyphar/filepath-securejoin v0.2.4 // indirect
+	github.com/cyphar/filepath-securejoin v0.2.5 // indirect
 	github.com/go-logfmt/logfmt v0.6.0 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/pjbgf/sha1cd v0.3.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
-	github.com/skeema/knownhosts v1.2.2 // indirect
+	github.com/skeema/knownhosts v1.3.0 // indirect
 	github.com/tdewolff/parse/v2 v2.7.15 // indirect
 	github.com/xrash/smetrics v0.0.0-20240521201337-686a1a2994c1 // indirect
-	golang.org/x/exp v0.0.0-20240506185415-9bf2ced13842 // indirect
+	golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20240123012728-ef4313101c80 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20240123012728-ef4313101c80 // indirect
 )
 
 require (
 	github.com/Microsoft/go-winio v0.6.1 // indirect
-	github.com/ProtonMail/go-crypto v1.0.0 // indirect
+	github.com/ProtonMail/go-crypto v1.1.3 // indirect
 	github.com/alessio/shellescape v1.4.1 // indirect
 	github.com/aymerick/douceur v0.2.0 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
@@ -113,15 +113,15 @@ require (
 	github.com/rivo/uniseg v0.4.7 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
 	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
-	github.com/stretchr/testify v1.9.0
+	github.com/stretchr/testify v1.10.0
 	github.com/xanzy/ssh-agent v0.3.3 // indirect
 	github.com/yuin/goldmark v1.7.4 // indirect
 	github.com/yuin/goldmark-emoji v1.0.3 // indirect
 	go.opentelemetry.io/proto/otlp v1.1.0 // indirect
 	golang.org/x/mod v0.20.0 // indirect
-	golang.org/x/net v0.28.0 // indirect
-	golang.org/x/sys v0.25.0 // indirect
-	golang.org/x/text v0.17.0 // indirect
+	golang.org/x/net v0.33.0 // indirect
+	golang.org/x/sys v0.28.0 // indirect
+	golang.org/x/text v0.21.0 // indirect
 	google.golang.org/grpc v1.62.1 // indirect
 	google.golang.org/protobuf v1.34.2
 	gopkg.in/ini.v1 v1.67.0 // indirect