chore(deps): update module github.com/go-git/go-git/v5 to v5.14.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/go-git/go-git/v5	v5.13.2 -> v5.14.0

---

Release Notes

go-git/go-git (github.com/go-git/go-git/v5)

v5.14.0

Compare Source

What's Changed

• v5: Bump Go and dependencies to mitigate GO-2025-3487 by @​pjbgf in https://github.com/go-git/go-git/pull/1436

⚠️ Note that this version requires Go 1.23, due to the bump to golang.org/x/crypto@v0.35.0 which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release.

Full Changelog: go-git/go-git@v5.13.2...v5.14.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 6 additional dependencies were updated

Details:

Package	Change
github.com/cloudflare/circl	v1.5.0 -> v1.6.0
github.com/cyphar/filepath-securejoin	v0.3.6 -> v0.4.1
github.com/skeema/knownhosts	v1.3.0 -> v1.3.1
golang.org/x/crypto	v0.32.0 -> v0.35.0
golang.org/x/net	v0.34.0 -> v0.35.0
golang.org/x/sys	v0.29.0 -> v0.30.0