chore: bump the gomod group across 1 directory with 4 updates

[dependabot]

Bumps the gomod group with 4 updates in the / directory: github.com/go-git/go-git/v5, github.com/go-logr/logr, github.com/stretchr/testify and golang.org/x/mod.

Updates github.com/go-git/go-git/v5 from 5.19.0 to 5.19.2

Commits

• 3eeb238 Merge pull request #2277 from go-git/checkout-v5
• 008a78f git: worktree, make the filesystem wrapper a symlink-safe boundary
• 2263fb5 Merge pull request #2268 from go-git/renovate/releases/v5.x-go-golang.org-x-t...
• 77b7625 build: Update module golang.org/x/text to v0.39.0 [SECURITY]
• 85ea767 Merge pull request #2267 from go-git/renovate/releases/v5.x-go-golang.org-x-n...
• 198675a build: Update module golang.org/x/net to v0.56.0 [SECURITY]
• 4a0e66d Merge pull request #2254 from pjbgf/v5-dotgit-ref-name-containment
• 3b306ef storage: dotgit, align reference-name safety with refname_is_safe
• f3d0cc1 storage: dotgit, reject path traversal in reference names
• 979cfe9 Merge pull request #2262 from joshblum/joshblum/to-slash-v5
• Additional commits viewable in compare view

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Commits

• 96a9aba Fix lint
• 51c6302 Better implementation of pointer recursion checking
• c667114 funcr: Handle and test recursive values
• f7ffadb Add benchmark for pointer args
• e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
• 2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
• 0b40896 build(deps): bump github/codeql-action/upload-sarif
• 77f671b Bump to Go 1.26
• cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
• 3832a11 build(deps): bump github/codeql-action/upload-sarif
• Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.11.1 to 1.12.0

Commits

• 001eb79 Merge pull request #1905 from Kentzo/patch-1
• ad40f38 Merge pull request #1906 from stretchr/dependabot/github_actions/actions/chec...
• 3bae017 build(deps): bump actions/checkout from 6.0.2 to 6.0.3
• f8c01f3 mock: Mock.Return does not exist anymore
• 12f8b56 Merge pull request #1563 from stretchr/make-AssertionFunc-types-aliases
• a11649e assert: make *AssertionFunc type just aliases
• dc20f41 Merge pull request #1890 from stretchr/dolmen/codegen-modernize
• 098f8d7 _codegen: use strings.Builder
• d2699be _codegen: modernize
• a463c8c Merge pull request #1885 from stretchr/dolmen/ci-check-ghactions-hashes
• Additional commits viewable in compare view

Updates golang.org/x/mod from 0.36.0 to 0.40.0

Commits

• d3398d0 go.mod: update golang.org/x dependencies
• 57549bf sumdb: ignore unrelated hashes in Lookup
• 96f62ae sumdb/tlog: fix TileHashReader authentication bypass
• 13be902 go.mod: update golang.org/x dependencies
• 792ac16 go.mod: update golang.org/x dependencies
• fe2ec04 all: fix some comments to improve readability
• deb1dfc go.mod: update golang.org/x dependencies
• 087f651 modfile: use slices.Backward
• 343ee60 x/mod: allow for aggressively conslidating requires
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions