chore(deps): bump the go-minor group across 2 directories with 3 updates

[dependabot]

Bumps the go-minor group with 2 updates in the / directory: github.com/go-git/go-git/v5 and golang.org/x/net.
Bumps the go-minor group with 1 update in the /pkg directory: github.com/oapi-codegen/runtime.

Updates github.com/go-git/go-git/v5 from 5.16.5 to 5.17.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.17.0

What's Changed

• build: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] in go-git/go-git#1839
• git: worktree, optimize infiles function for very large repos by @​k-anshul in go-git/go-git#1853
• git: Add strict checks for supported extensions by @​pjbgf in go-git/go-git#1861
• backport, git: Improve Status() speed with new index.ModTime check by @​cedric-appdirect in go-git/go-git#1862
• storage: filesystem, Avoid overwriting loose obj files by @​pjbgf in go-git/go-git#1864

Full Changelog: go-git/go-git@v5.16.5...v5.17.0

Commits

• bdf0688 Merge pull request #1864 from pjbgf/v5-issue-55
• 5290e52 storage: filesystem, Avoid overwriting loose obj files. Fixes #55
• 5d20a62 storage: filesystem, Fix permissions for loose and packed objs
• 8ed442c backport, git: Improve Status() speed with new index.ModTime check (#1862)
• c7b5960 build: Align test workflow with main
• 8e71edf git: Add strict checks for supported extensions
• 438a37f git: worktree, optimize infiles function for very large repos (#1853)
• 67c7006 Merge pull request #1839 from go-git/renovate/releases/v5.x-go-github.com-go-...
• 4ca3f02 build: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY]
• See full diff in compare view

Updates golang.org/x/net from 0.50.0 to 0.51.0

Commits

• 60b3f6f internal/http3: prevent Server handler from writing longer body than declared
• b0ca456 internal/http3: fix Write in Server Handler returning the wrong value
• 1558ba7 publicsuffix: update to 2026-02-06
• 4e1c745 internal/http3: make Server response include headers that can be inferred
• 19f580f http2: fix nil panic in typeFrameParser for unassigned frame types
• 818aad7 internal/http3: add server to client trailer header support
• c1bbe1a internal/http3: add client to server trailer header support
• 29181b8 all: remove go1.25 and older build constraints
• 8109305 all: upgrade go directive to at least 1.25.0 [generated]
• 0b37bdf quic: don't run TestStreamsCreateConcurrency in synctest bubble
• Additional commits viewable in compare view

Updates github.com/oapi-codegen/runtime from 1.1.2 to 1.2.0

Release notes

Sourced from github.com/oapi-codegen/runtime's releases.

Parameter binding extensions, bug fixes, dependency updates

Notable Changes

The main change in this release is the addition of new Parameter binding and styling functions, which allow the code generator to pass in the type and format from the spec. Previously, we inferred what we wanted to do based on the destination type, however, it's not always possible to decide this without information about the specification.

🚀 New features and improvements

• feat: add BindRawQueryParameter for correct comma handling (#92) @​mromaszewicz
• fix: add TypeHint-aware parameter binding and styling for []byte (#97) (#98) @​mromaszewicz
• Support array of objects parameters (#40) @​danicc097
• Allow BindStyledParameterWithOptions to fill maps (#72) @​JoZie

🐛 Bug fixes

• fix: bind Date and Time query params as scalar values (#21) (#93) @​mromaszewicz
• fix: support non-indexed deepObject array unmarshaling (#22) (#96) @​mromaszewicz
• fix: correct time.Time date-only fallback parsing in deepObject (#95) @​mromaszewicz
• Refactor date parsing error handling (#88) @​jsnfwlr
• fix: improve email validation using net/mail package (#60) @​sniperwolf
• Fix deepObject marshalling losing json number format/precision (#29) @​mgabeler-lee-6rs
• Fix issue 55 (#56) @​mikhalytch
• fix(deepobject): support nested objects in deepObject arrays (#84) @​adrianbrad

👻 Maintenance

• feat(fix): bump gin version (#51) @​Gamawn
• Update golang.org/x/crypto to v0.32.0 (#59) @​kojustin
• Updated Golang reference to address security vulnerability (#57) @​ivan-manzhulin
• Fix linter errors (#85) @​mromaszewicz
• build: capture govulncheck results as Code Scanning alerts (#80) @​jamietanna

📦 Dependency updates

• chore(deps): update release-drafter/release-drafter action to v6 (#31) @renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

... (truncated)

Commits

• b76a24f fix: bind Date and Time query params as scalar values (#21) (#93)
• 1f844c3 feat: add BindRawQueryParameter for correct comma handling (#92)
• ca4e933 fix: support non-indexed deepObject array unmarshaling (#22) (#96)
• ead11e4 fix: correct time.Time date-only fallback parsing in deepObject (#95)
• 224825a fix: add Type/Format-aware parameter binding and styling for []byte (#97) (#98)
• 03288f9 Refactor date parsing error handling (#88)
• effec1a feat(fix): bump gin version (#51)
• 53a813b fix: improve email validation using net/mail package (#60)
• 451d249 Update golang.org/x/crypto to v0.32.0 (#59)
• 7dffa6e Updated Golang reference to address security vulnerability (#57)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions