chore(deps): bump the go_modules group across 3 directories with 3 updates

[dependabot[bot]]

Bumps the go_modules group with 1 update in the /repo-cloner directory: github.com/go-git/go-git/v5. Bumps the go_modules group with 1 update in the /gitea-oauth2-setup directory: google.golang.org/protobuf. Bumps the go_modules group with 3 updates in the /app/api directory: github.com/go-git/go-git/v5, google.golang.org/protobuf and github.com/vektah/gqlparser/v2.

Updates github.com/go-git/go-git/v5 from 5.4.2 to 5.11.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.11.0

What's Changed

• git: validate reference names (#929) by @​aymanbagabas in go-git/go-git#950
• git: stop iterating at oldest shallow when pulling. Fixes #305 by @​dhoizner in go-git/go-git#939
• plumbing: object, enable renames in getFileStatsFromFilePatches by @​djmoch in go-git/go-git#941
• storage: filesystem, Add option to set a specific FS for alternates by @​pjbgf in go-git/go-git#953
• Align worktree validation with upstream and remove build warnings by @​pjbgf in go-git/go-git#958

New Contributors

• @​dhoizner made their first contribution in go-git/go-git#939
• @​djmoch made their first contribution in go-git/go-git#941

Full Changelog: https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0

v5.10.1

What's Changed

• Worktree, ignore ModeSocket files by @​steiler in go-git/go-git#930
• git: add tracer package by @​aymanbagabas in go-git/go-git#916
• remote: Flip clause for fast-forward only check by @​adityasaky in go-git/go-git#875
• plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes #900 by @​anandf in go-git/go-git#901
• plumbing: uppload-server-info, implement upload-server-info by @​aymanbagabas in go-git/go-git#896
• plumbing: optimise memory consumption for filesystem storage by @​pjbgf in go-git/go-git#799
• plumbing: format/packfile, Refactor patch delta by @​pjbgf in go-git/go-git#908
• plumbing: fix empty uploadpack request error by @​aymanbagabas in go-git/go-git#932
• plumbing: transport/git, Improve tests error message by @​pjbgf in go-git/go-git#752
• plumbing: format/pktline, Respect pktline error-line errors by @​aymanbagabas in go-git/go-git#936
• utils: remove ioutil.Pipe and use std library io.Pipe by @​aymanbagabas in go-git/go-git#922
• utils: move trace to utils by @​aymanbagabas in go-git/go-git#931
• cli: separate go module for cli by @​aymanbagabas in go-git/go-git#914
• build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by @​dependabot in go-git/go-git#887
• build: bump actions/setup-go from 3 to 4 by @​dependabot in go-git/go-git#891
• build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by @​dependabot in go-git/go-git#888
• build: bump actions/checkout from 3 to 4 by @​dependabot in go-git/go-git#890
• build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by @​dependabot in go-git/go-git#907
• build: bump golang.org/x/text from 0.13.0 to 0.14.0 by @​dependabot in go-git/go-git#906
• build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by @​dependabot in go-git/go-git#917
• build: bump golang.org/x/net from 0.17.0 to 0.18.0 by @​dependabot in go-git/go-git#918

New Contributors

• @​anandf made their first contribution in go-git/go-git#901
• @​steiler made their first contribution in go-git/go-git#930

Full Changelog: https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1

v5.10.0

What's Changed

• PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by @​ThinkChaos in go-git/go-git#782

... (truncated)

Commits

• 5d08d3b Merge pull request #958 from pjbgf/workval
• 5bd1d8f build: Ensure checkout is the first operation
• b2c1982 git: worktree, Align validation with upstream rules
• cec7da6 Merge pull request #953 from pjbgf/alternates
• 8b47ceb storage: filesystem, Add option to set a specific FS for alternates
• 4f61489 Merge pull request #941 from djmoch/filestats-rename
• ae552ce Merge pull request #939 from dhoizner/fix-pull-after-shallow
• cc1895b Merge pull request #950 from aymanbagabas/validate-ref
• de1d5a5 git: validate reference names
• d87110b Merge pull request #948 from go-git/dependabot/go_modules/cli/go-git/github.c...
• Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.28.1 to 1.33.0

Updates github.com/go-git/go-git/v5 from 5.4.2 to 5.11.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.11.0

What's Changed

• git: validate reference names (#929) by @​aymanbagabas in go-git/go-git#950
• git: stop iterating at oldest shallow when pulling. Fixes #305 by @​dhoizner in go-git/go-git#939
• plumbing: object, enable renames in getFileStatsFromFilePatches by @​djmoch in go-git/go-git#941
• storage: filesystem, Add option to set a specific FS for alternates by @​pjbgf in go-git/go-git#953
• Align worktree validation with upstream and remove build warnings by @​pjbgf in go-git/go-git#958

New Contributors

• @​dhoizner made their first contribution in go-git/go-git#939
• @​djmoch made their first contribution in go-git/go-git#941

Full Changelog: https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0

v5.10.1

What's Changed

• Worktree, ignore ModeSocket files by @​steiler in go-git/go-git#930
• git: add tracer package by @​aymanbagabas in go-git/go-git#916
• remote: Flip clause for fast-forward only check by @​adityasaky in go-git/go-git#875
• plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes #900 by @​anandf in go-git/go-git#901
• plumbing: uppload-server-info, implement upload-server-info by @​aymanbagabas in go-git/go-git#896
• plumbing: optimise memory consumption for filesystem storage by @​pjbgf in go-git/go-git#799
• plumbing: format/packfile, Refactor patch delta by @​pjbgf in go-git/go-git#908
• plumbing: fix empty uploadpack request error by @​aymanbagabas in go-git/go-git#932
• plumbing: transport/git, Improve tests error message by @​pjbgf in go-git/go-git#752
• plumbing: format/pktline, Respect pktline error-line errors by @​aymanbagabas in go-git/go-git#936
• utils: remove ioutil.Pipe and use std library io.Pipe by @​aymanbagabas in go-git/go-git#922
• utils: move trace to utils by @​aymanbagabas in go-git/go-git#931
• cli: separate go module for cli by @​aymanbagabas in go-git/go-git#914
• build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by @​dependabot in go-git/go-git#887
• build: bump actions/setup-go from 3 to 4 by @​dependabot in go-git/go-git#891
• build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by @​dependabot in go-git/go-git#888
• build: bump actions/checkout from 3 to 4 by @​dependabot in go-git/go-git#890
• build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by @​dependabot in go-git/go-git#907
• build: bump golang.org/x/text from 0.13.0 to 0.14.0 by @​dependabot in go-git/go-git#906
• build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by @​dependabot in go-git/go-git#917
• build: bump golang.org/x/net from 0.17.0 to 0.18.0 by @​dependabot in go-git/go-git#918

New Contributors

• @​anandf made their first contribution in go-git/go-git#901
• @​steiler made their first contribution in go-git/go-git#930

Full Changelog: https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1

v5.10.0

What's Changed

• PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by @​ThinkChaos in go-git/go-git#782

... (truncated)

Commits

• 5d08d3b Merge pull request #958 from pjbgf/workval
• 5bd1d8f build: Ensure checkout is the first operation
• b2c1982 git: worktree, Align validation with upstream rules
• cec7da6 Merge pull request #953 from pjbgf/alternates
• 8b47ceb storage: filesystem, Add option to set a specific FS for alternates
• 4f61489 Merge pull request #941 from djmoch/filestats-rename
• ae552ce Merge pull request #939 from dhoizner/fix-pull-after-shallow
• cc1895b Merge pull request #950 from aymanbagabas/validate-ref
• de1d5a5 git: validate reference names
• d87110b Merge pull request #948 from go-git/dependabot/go_modules/cli/go-git/github.c...
• Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.28.1 to 1.33.0

Updates github.com/vektah/gqlparser/v2 from 2.5.1 to 2.5.15

Release notes

Sourced from github.com/vektah/gqlparser/v2's releases.

v2.5.15

What's Changed

• Revert ParseSchema default token limit of 1500, add ParseSchemaWithLimit, ParseSchemasWithLimit by @​StevenACoffman in vektah/gqlparser#306

Full Changelog: https://github.com/vektah/gqlparser/compare/v2.5.14...v2.5.15

v2.5.14

What's Changed

• Add ParseQueryWithLimit by @​StevenACoffman in vektah/gqlparser#304

Full Changelog: https://github.com/vektah/gqlparser/compare/v2.5.13...v2.5.14

v2.5.13

What's Changed

• Bump the actions-deps group in /validator/imported with 6 updates by @​dependabot in vektah/gqlparser#298
• Bump prettier from 3.2.5 to 3.3.0 in /validator/imported in the actions-deps group by @​dependabot in vektah/gqlparser#299
• Bump the actions-deps group in /validator/imported with 7 updates by @​dependabot in vektah/gqlparser#301
• Bump braces from 3.0.2 to 3.0.3 in /validator/imported by @​dependabot in vektah/gqlparser#302
• Token limit fix CVE-2023-49559 by @​uvzz in vektah/gqlparser#291

New Contributors

• @​uvzz made their first contribution in vektah/gqlparser#291

Full Changelog: https://github.com/vektah/gqlparser/compare/v2.5.12...v2.5.13

v2.5.12

What's Changed

• Disallow empty parens (#292). by @​yuchenshi in vektah/gqlparser#293
• WithBuiltin FormatterOption added by @​atzedus in vektah/gqlparser#294
• Redo github actions by @​StevenACoffman in vektah/gqlparser#295
• Bump github.com/stretchr/testify from 1.4.0 to 1.9.0 in the actions-deps group by @​dependabot in vektah/gqlparser#296
• Bump the actions-deps group in /validator/imported with 8 updates by @​dependabot in vektah/gqlparser#297

New Contributors

• @​yuchenshi made their first contribution in vektah/gqlparser#293

Full Changelog: https://github.com/vektah/gqlparser/compare/v2.5.11...v2.5.12

v2.5.11

What's Changed

• Bump get-func-name from 2.0.0 to 2.0.2 in /validator/imported by @​dependabot in vektah/gqlparser#284
• Bump @​babel/traverse from 7.22.6 to 7.23.2 in /validator/imported by @​dependabot in vektah/gqlparser#285
• Fix description formatting (possible " character) by @​blmhemu in vektah/gqlparser#289
• gqlerror: implement List.Unwrap by @​emersion in vektah/gqlparser#290

New Contributors

• @​blmhemu made their first contribution in vektah/gqlparser#289
• @​emersion made their first contribution in vektah/gqlparser#290

... (truncated)

Commits

• 55a3c47 Revert ParseSchema default token limit of 1500, add ParseSchemaWithLimit, Par...
• 36a3658 Add ParseQueryWithLimit (#304)
• d457fc0 Token limit fix CVE-2023-49559 (#291)
• 6db1bd3 Bump braces from 3.0.2 to 3.0.3 in /validator/imported (#302)
• 3900414 Bump the actions-deps group in /validator/imported with 7 updates (#301)
• 7c770f6 Bump prettier in /validator/imported in the actions-deps group (#299)
• 0ed4973 Bump the actions-deps group in /validator/imported with 6 updates (#298)
• 00fd36f Bump the actions-deps group in /validator/imported with 8 updates (#297)
• 9638a21 Bump github.com/stretchr/testify in the actions-deps group (#296)
• 55ebe37 Add Dependabot.yml
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/konstellation-io/kdl-server/network/alerts).

[dependabot[bot]]

The following labels could not be found: dependency-management, develop-team.

[dependabot[bot]]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml