fix(deps): update module github.com/go-git/go-git/v5 to v5.16.1

[stackit-pipeline]

This PR contains the following updates:

Package	Type	Update	Change
github.com/go-git/go-git/v5	require	minor	v5.13.2 -> v5.16.1
github.com/go-git/go-git/v5	require	patch	v5.16.0 -> v5.16.1
github.com/go-git/go-git/v5	require	minor	v5.15.0 -> v5.16.1
github.com/go-git/go-git/v5	require	minor	v5.14.0 -> v5.16.1

---

Release Notes

go-git/go-git (github.com/go-git/go-git/v5)

v5.16.1

Compare Source

What's Changed

• utils: merkletrie, Fix diff on sparse-checkout index. Fixes #​1406 to releases/v5.x by @​kane8n in https://github.com/go-git/go-git/pull/1561

New Contributors

• @​kane8n made their first contribution in https://github.com/go-git/go-git/pull/1561

Full Changelog: go-git/go-git@v5.16.0...v5.16.1

v5.16.0

Compare Source

What's Changed

• [v5] plumbing: support mTLS for HTTPS protocol by @​hiddeco in https://github.com/go-git/go-git/pull/1510
• v5: plumbing: transport, Reintroduce SetHostKeyCallback. Fix #​1514 by @​pjbgf in https://github.com/go-git/go-git/pull/1515

Full Changelog: go-git/go-git@v5.15.0...v5.16.0

v5.15.0

Compare Source

What's Changed

• plumbing: add cert auth support to releases/v5.x by @​Javier-varez in https://github.com/go-git/go-git/pull/1482
• v5: Bump dependencies by @​pjbgf in https://github.com/go-git/go-git/pull/1505

Full Changelog: go-git/go-git@v5.14.0...v5.15.0

v5.14.0

Compare Source

What's Changed

• v5: Bump Go and dependencies to mitigate GO-2025-3487 by @​pjbgf in https://github.com/go-git/go-git/pull/1436

⚠️ Note that this version requires Go 1.23, due to the bump to golang.org/x/[email protected] which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog: go-git/go-git@v5.13.2...v5.14.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[stackit-pipeline]

ℹ Artifact update notice

File name: scripts/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.21 -> 1.23.0
golang.org/x/mod	v0.24.0 -> v0.12.0

[github-actions]

This PR was marked as stale after 7 days of inactivity and will be closed after another 7 days of further inactivity. If this PR should be kept open, just add a comment, remove the stale label or push new commits to it.