fix(deps): update go dependencies minor and patch updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/go-git/go-git/v5	v5.14.0 -> v5.16.0
github.com/knadh/koanf/parsers/dotenv	v1.0.0 -> v1.1.0
github.com/knadh/koanf/providers/env	v1.0.0 -> v1.1.0
github.com/knadh/koanf/providers/file	v1.1.2 -> v1.2.0
github.com/knadh/koanf/v2	v2.1.2 -> v2.2.0
github.com/mholt/archives	v0.1.1 -> v0.1.2
gitlab.com/gitlab-org/api/client-go	v0.127.0 -> v0.129.0
golang.org/x/crypto	v0.37.0 -> v0.38.0

---

Release Notes

go-git/go-git (github.com/go-git/go-git/v5)

v5.16.0

Compare Source

What's Changed

• [v5] plumbing: support mTLS for HTTPS protocol by @​hiddeco in https://github.com/go-git/go-git/pull/1510
• v5: plumbing: transport, Reintroduce SetHostKeyCallback. Fix #​1514 by @​pjbgf in https://github.com/go-git/go-git/pull/1515

Full Changelog: go-git/go-git@v5.15.0...v5.16.0

v5.15.0

Compare Source

What's Changed

• plumbing: add cert auth support to releases/v5.x by @​Javier-varez in https://github.com/go-git/go-git/pull/1482
• v5: Bump dependencies by @​pjbgf in https://github.com/go-git/go-git/pull/1505

Full Changelog: go-git/go-git@v5.14.0...v5.15.0

knadh/koanf (github.com/knadh/koanf/parsers/dotenv)

v1.1.0

Compare Source

• 036e4bf Merge pull request #​79 from aeneasr/fix-memory-keyparts
• 6692d05 Merge pull request #​78 from aeneasr/fix-memory-use
• d174d00 Reduce memory consumption for populateKeyParts
• 1095e5e Significantly reduce memory use of maps.Flatten
• 7d983f3 Fix Watch() doc

mholt/archives (github.com/mholt/archives)

v0.1.2

Compare Source

What's Changed

• Make DeepFS.SplitPath public & fix nested ext bug by @​bplaxco in https://github.com/mholt/archives/pull/26
• fix(brotli): better brotli detection heuristics by @​darkliquid in https://github.com/mholt/archives/pull/30
• feat(rar): add support for multi-volume rar archives by @​darkliquid in https://github.com/mholt/archives/pull/33

New Contributors

• @​bplaxco made their first contribution in https://github.com/mholt/archives/pull/26
• @​darkliquid made their first contribution in https://github.com/mholt/archives/pull/30

Full Changelog: mholt/archives@v0.1.1...v0.1.2

gitlab-org/api/client-go (gitlab.com/gitlab-org/api/client-go)

v0.129.0

Compare Source

0.129.0 (2025-05-19)

Improvements (41 changes)

• feat: Add enforce_ci_inbound_job_token_scope_enabled to Settings (merge request)
• test: add tests to handle addtional scenarios for award_emojis by @​syedzubeen (merge request)
• Parallelize UT runs by @​syedzubeen (merge request)
• feat(issues): Allow resetting due date, epic, milestone, and weight from issues. (merge request)
• Add support for pipeline schedule inputs by @​heidi.berry (merge request)
• chore: housekeeping – fix typos across multiple files by @​syedzubeen (merge request)
• feat(todos): Support filtering by group_id. (merge request)
• Add ListGroupAccessTokensOptions by @​jdesnoes (merge request)
• Add remaining feature flag endpoints by @​heidi.berry (merge request)
• go: Update module golang.org/x/oauth2 to v0.30.0 (merge request)
• Add gitlab.WithRequestRetry to retry with any status code by @​sue445 (merge request)
• Improve Release Notes Generation in CI Pipeline by @​octo42 (merge request)
• Remove merge request approvers function by @​heidi.berry (merge request)
• Remove project approvers function by @​heidi.berry (merge request)
• Remove snippet_blob search function by @​heidi.berry (merge request)
• Remove alias function for UpdateProtectedBranch by @​heidi.berry (merge request)
• Breaking change, remove job token scope outbound enabled by @​heidi.berry (merge request)
• Breaking change, remove take ownership of pipeline trigger by @​heidi.berry (merge request)
• Adds a documentation example to create/list/approve/add comments to MRs by @​syedzubeen (merge request)
• Update deprecation notices for runners API by @​heidi.berry (merge request)
• test: Add testBodyJSON, remove testBody. (merge request)
• test: Adds missing UT's for TransferProject, GetRepositoryStorage and others by @​syedzubeen (merge request)
• Correct field type, add some missing fields to settings by @​heidi.berry (merge request)
• Add support for the Group Markdown Uploads API by @​heidi.berry (merge request)
• go: Update module golang.org/x/time to v0.11.0 (merge request)
• feat(issues): Add Confidential to ListGroupIssuesOptions. (merge request)
• Revert: remove deprecation of Epics APIs until work items api is available by @​heidi.berry (merge request)
• refactor: Enhance README with ToC by @​syedzubeen (merge request)
• Add comments to examples by @​syedzubeen (merge request)
• refactor: fixes/cleanups by @​syedzubeen (merge request)
• Add ability to include specific branches when forking a project by @​heidi.berry (merge request)
• Remove managed licenses, use approval policies instead by @​heidi.berry (merge request)
• Update clusters deprecation notice to include fields deprecated in 19.0 by @​heidi.berry (merge request)
• Bump go.mod to 1.23 (merge request)
• test: Use require over assert in tests where failure should stop execution by @​syedzubeen (merge request)
• Update golangci/golangci-lint Docker tag to v2.1.5 (merge request)
• Update baseline go version to 1.23 (merge request)
• feat(user/status): Add support for clear_status_after / clear_status_at. (merge request)
• GetUserStatus now supports user ID and username instead of just user ID (merge request)
• Add CODEOWNERS (merge request)
• feat: Export the ErrInvalidIDType error. (merge request)

Breaking Changes (4 changes)

• Remove deprecated service integrations, along with removing project_key from the Jira service by @​heidi.berry (merge request)
• Remove UploadFile function, user UploadProjectMarkdown instead by @​heidi.berry (merge request)
• Remove deprecated functions, use ProtectedBranchesService instead by @​heidi.berry (merge request)
• DORA metrics, remove EnvironmentTier, use EnvironmentTiers instead by @​heidi.berry (merge request)

v0.128.0

Compare Source

0.128.0 (2025-04-24)

Improvements (35 changes)

• Add pipeline source constants to enhance API integration by @​xestenlite (merge request)
• Add support for retrieving signatures for tags by @​David-Development (merge request)
• Add debug logs for sporadically failing job (merge request)
• Add support for getting issues related to MRs (merge request)
• Preserve URL encoding in error messages by @​helmyl (merge request)
• test: Enhance UT for Testing New Clients by @​syedzubeen (merge request)
• refactor: use table-driven tests for conciseness and maintainability by @​syedzubeen (merge request)
• Breaking change, remove color from broadcast messages by @​heidi.berry (merge request)
• test: Enhance UTs to cover more cases by @​syedzubeen (merge request)
• test: Adds a unit test for the Render method in the MarkdownService by @​syedzubeen (merge request)
• Add UTs for TestMarkAllTodosAsDone by @​syedzubeen (merge request)
• Add little missing deprecation notice by @​heidi.berry (merge request)
• Add support for the Dependencies API by @​heidi.berry (merge request)
• Add support for the Alert Management API by @​heidi.berry (merge request)
• Add missing fields to LinePositionOptions by @​jakubbortlik (merge request)
• Add support for the Database Migrations API by @​heidi.berry (merge request)
• Add support for the Enterprise Users API by @​heidi.berry (merge request)
• Add support for the Application Statistics API by @​heidi.berry (merge request)
• Add support for the Feature Flag User Lists API by @​heidi.berry (merge request)
• Add support for the Group Activity Analytics API by @​heidi.berry (merge request)
• Add support for the Dependency Proxy API by @​heidi.berry (merge request)
• Add basic GraphQL interface in client (merge request)
• Implement iterator-based Scan helper functions for easy pagination (merge request)
• Add support for Geo Sites API by @​heidi.berry (merge request)
• Fix local golangci-lint installation (merge request)
• Added reviewer_ids to MergeCommentEvent by @​renbou (merge request)
• Update golangci/golangci-lint Docker tag to v2 (merge request)
• go: Update module go.uber.org/mock to v0.5.1 (merge request)
• Add deprecation notices on whole APIs by @​heidi.berry (merge request)
• Update doc links by @​heidi.berry (merge request)
• Update doc links by @​heidi.berry (merge request)
• Add SourcePipeline to JobEvent Webhook struct by @​camtheman256 (merge request)
• Add deprecation notices to fields and functions by @​heidi.berry (merge request)
• Add deprecation notices to fields and functions by @​heidi.berry (merge request)
• Update doc links by @​heidi.berry (merge request)

Bug Fixes (1 change)

• Breaking Change: Fixed an issue where "None" or "Any" didn't work when using... by @​prarit (merge request)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 5 additional dependencies were updated

Details:

Package	Change
github.com/andybalholm/brotli	v1.1.1 -> v1.1.2-0.20250424173009-453214e765f3
github.com/cloudflare/circl	v1.6.0 -> v1.6.1
golang.org/x/oauth2	v0.29.0 -> v0.30.0
golang.org/x/sys	v0.32.0 -> v0.33.0
golang.org/x/text	v0.24.0 -> v0.25.0