chore(deps): bump the go group with 5 updates

[dependabot]

Bumps the go group with 5 updates:

Package	From	To
github.com/adrg/xdg	0.5.0	0.5.3
github.com/fatih/color	1.17.0	1.18.0
github.com/go-git/go-billy/v5	5.5.0	5.6.0
github.com/hashicorp/go-plugin	1.6.1	1.6.2
golang.org/x/exp	0.0.0-20240103183307-be819d1f06fc	0.0.0-20240719175910-8a7402abbf56

Updates github.com/adrg/xdg from 0.5.0 to 0.5.3

Release notes

Sourced from github.com/adrg/xdg's releases.

v0.5.3

Changelog

• Updated xdg.SearchRuntimeFile to also look in the operating system's temporary directory for runtime files. This covers unlikely cases in which runtime files cannot be written relative to the base runtime directory either because it does not exist or it is not accessible, so xdg.RuntimeFile suggests the operating system's temporary directory as a suitable fallback location.

Internal

• Improved package testing.

v0.5.2

Changelog

• Updated logic of xdg.RuntimeFile: due to the special nature of the runtime directory, the function no longer attempts to create it if it does not exist. If that's the case, the function uses the operating system's temporary directory as a fallback. The function still creates subdirectories relative to the base runtime directory or its fallback.

  Justification: the creation of the runtime directory is not in the scope of this package as it has special requirements defined by the XDG Base Directory Specification. Relevant excerpt:

  The lifetime of the directory MUST be bound to the user being logged in. It MUST be created when the user first logs in and if the user fully logs out the directory MUST be removed. If the user logs in more than once they should get pointed to the same directory, and it is mandatory that the directory continues to exist from their first login to their last logout on the system, and not removed in between. Files in the directory MUST not survive reboot or a full logout/login cycle.

  Also, on Linux, the parent directories of the default user runtime directory are owned by the root user so they cannot be created by a regular user. pam_systemd is usually responsible for creating the runtime directory (/run/user/$UID).

v0.5.1

Changelog

• Added support for the non-standard XDG_BIN_HOME base directory. See XDG base directories README section for more details.
• Added more config and data search locations on macOS.
  • Added ~/.config at the end of the list of default locations for XDG_CONFIG_DIRS.
  • Added ~/.local/share at the end of the list of default locations for XDG_DATA_DIRS.
• Added more application search locations on Windows:
  • %ProgramFiles%
  • %ProgramFiles%\Common Files
  • %LOCALAPPDATA%\Programs
  • %LOCALAPPDATA%\Programs\Common

Internal

• Updated golang.org/x/sys dependency to the latest version.
• Improved package testing.

Commits

• aa865a5 Merge pull request #101 from adrg/update-search-runtime-file
• 71a81ec Minor xdg.SearchRuntimeFile function documentation update
• 88111eb Minor example update in README.md and doc.go
• d9f76be Improve non-existent runtime directory test case
• 800775a Update xdg.SearchRuntimeFile to also look in temporary directory
• 2335a68 Merge pull request #99 from adrg/improve-runtime-file
• 221e506 Minor non-existent runtime directory test case fix on macOS
• 9bbb602 Minor error format improvement in pathutil.Create and pathutil.Search
• 987b3ce Minor README.md update
• 3c39d55 Add non-existent runtime directory test case
• Additional commits viewable in compare view

Updates github.com/fatih/color from 1.17.0 to 1.18.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.18.0

What's Changed

• Add RGB API support by @​fatih in fatih/color#225
• Bump GitHub workflow actions by @​deining in fatih/color#235
• Bump golang.org/x/sys from 0.18.0 to 0.24.0 by @​dependabot in fatih/color#236
• Bump golang.org/x/sys from 0.24.0 to 0.25.0 by @​dependabot in fatih/color#237

New Contributors

• @​deining made their first contribution in fatih/color#235

Full Changelog: fatih/color@v1.17.0...v1.18.0

Commits

• 1c8d870 Update README.md
• 546c2d0 Merge pull request #225 from fatih/add-rgb-api
• 1ff0f97 Apply suggestions from code review
• 5723903 Add RGB API support
• f203fbc Merge pull request #237 from fatih/dependabot/go_modules/golang.org/x/sys-0.25.0
• 60aa7fb Bump golang.org/x/sys from 0.24.0 to 0.25.0
• 741c2f4 Merge pull request #236 from fatih/dependabot/go_modules/golang.org/x/sys-0.24.0
• 0d24b42 Bump golang.org/x/sys from 0.18.0 to 0.24.0
• cb154c0 Merge pull request #235 from deining/fix-typo
• 9b9653e Bump GitHub workflow actions
• See full diff in compare view

Updates github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.6.0

What's Changed

• Adding support for wasm/wasip1 by @​tryggvil in go-git/go-billy#36
• Memory.ReadDir() should return an error when path isn't found. by @​weberc2-tempus in go-git/go-billy#38
• Adding support for WriteAt by @​sfc-gh-thardie in go-git/go-billy#39
• Update memfs.New() to create root directory by @​onee-only in go-git/go-billy#45
• Fix symlink by @​pjbgf in go-git/go-billy#46
• Close via defer by @​spennymac in go-git/go-billy#47
• General improvements to memfs by @​pjbgf in go-git/go-billy#50
• boundos:insideBaseDirEval: return true if baseDir is "/" by @​rminnich in go-git/go-billy#48
• Add wrapper for io/fs by @​evankanderson in go-git/go-billy#81

New Contributors

• @​dependabot made their first contribution in go-git/go-billy#35
• @​tryggvil made their first contribution in go-git/go-billy#36
• @​weberc2-tempus made their first contribution in go-git/go-billy#38
• @​sfc-gh-thardie made their first contribution in go-git/go-billy#39
• @​onee-only made their first contribution in go-git/go-billy#45
• @​spennymac made their first contribution in go-git/go-billy#47
• @​rminnich made their first contribution in go-git/go-billy#48
• @​evankanderson made their first contribution in go-git/go-billy#81

Full Changelog: go-git/go-billy@v5.5.0...v5.6.0

Commits

• 371e232 Merge pull request #85 from go-git/dependabot/github_actions/github/codeql-ac...
• 5087c4c build: bump github/codeql-action from 3.26.10 to 3.26.11
• 5f263c9 Merge pull request #84 from go-git/dependabot/github_actions/github/codeql-ac...
• 18ec098 build: bump github/codeql-action from 3.26.8 to 3.26.10
• c1ee0b9 Merge pull request #81 from evankanderson/iofs
• b50bc97 Rename Wrap to New
• 9745bbb Merge pull request #83 from go-git/dependabot/github_actions/github/codeql-ac...
• d864d47 build: bump github/codeql-action from 3.26.7 to 3.26.8
• b8c5b1b Prevent test failures on Windows, address feedback from pjbgf
• 28f6c49 Fix test handling on go < 1.23
• Additional commits viewable in compare view

Updates github.com/hashicorp/go-plugin from 1.6.1 to 1.6.2

Release notes

Sourced from github.com/hashicorp/go-plugin's releases.

v1.6.2

ENHANCEMENTS:

• Added support for gRPC dial options to the Dial API [GH-257]

BUGS:

• Fixed a bug where reattaching to a plugin that exits could kill an unrelated process [GH-320]

Changelog

Sourced from github.com/hashicorp/go-plugin's changelog.

v1.6.2

ENHANCEMENTS:

• Added support for gRPC dial options to the Dial API [GH-257]

BUGS:

• Fixed a bug where reattaching to a plugin that exits could kill an unrelated process [GH-320]

Commits

• edcdee4 changelog for 1.6.2 (#322)
• df94fce reattach: don't kill process on failed reconnection (#320)
• 7e5ceaa Fix test and add CI (#321)
• 0c4f564 Fix typo in Doc comment (#307)
• 06afb6d GRPCBroker: add DialWithOptions (#257)
• 0e45961 Remove go-testing-interface from go-plugin (#312)
• See full diff in compare view

Updates golang.org/x/exp from 0.0.0-20240103183307-be819d1f06fc to 0.0.0-20240719175910-8a7402abbf56

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions