chore(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0

[dependabot]

Bumps github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0.

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.9.0

What's Changed

• Use path.Clean instead of filepath.Clean in iofs.Open by @​puerco in go-git/go-billy#197
• Deprecate ChrootOS in favour of BoundOS by @​pjbgf in go-git/go-billy#201
• General Improvements by @​pjbgf in go-git/go-billy#203
• osfs: ChrootOS eval baseDir on creation by @​pjbgf in go-git/go-billy#205
• Run go-git tests as part of integration tests by @​pjbgf in go-git/go-billy#206

Full Changelog: go-git/go-billy@v5.8.0...v5.9.0

Commits

• 237e529 Merge pull request #206 from pjbgf/v5-improvements
• 04edb39 build: Add go-git integration test
• d8efefd osfs: preserve empty ChrootOS base
• 07f2a0b Merge pull request #205 from pjbgf/v5-improvements
• 25207c8 build: Bump Go versions in workflows
• 2fda229 osfs: ChrootOS eval baseDir on creation
• 427b27f Merge pull request #203 from pjbgf/v5-improvements
• 7d5a23e chroot: Reject symlink loops
• 2c2287a util: avoid following symlinks in RemoveAll fallback
• cbd88e9 Fix mount path handling
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[github-actions]

Benchstat (Other)

Base: bfce08648e01652ac7c0afa6b2a94f8382099d7b
Head: 023cf593aba4b6a0717d8bd7742ee214587095ea

✅ 1 improvement(s)

Benchmark	Base	Head	Change	p-value
ResourceSelectorQueryBuild/tags-4	16.71µ	16.32µ	-2.38%	0.002

Full benchstat output

goos: linux
goarch: amd64
pkg: github.com/flanksource/duty/bench
cpu: AMD EPYC 9V74 80-Core Processor                
                                                       │ bench-base.txt │           bench-head.txt            │
                                                       │     sec/op     │    sec/op      vs base              │
InsertionForRowsWithAliases/external_users.aliases-4       525.6µ ± 23%   535.0µ ±  12%       ~ (p=0.818 n=6)
InsertionForRowsWithAliases/config_items.external_id-4     1.040m ± 11%   1.037m ±  11%       ~ (p=0.937 n=6)
InsertionOfConfigsWithProperties-4                         3.375m ±  2%   3.372m ±   3%       ~ (p=0.937 n=6)
UpdateOfConfigsWithProperties-4                            7.263m ±  5%   7.265m ±   2%       ~ (p=1.000 n=6)
ResourceSelectorConfigs/name-4                             195.2µ ±  7%   193.9µ ±   3%       ~ (p=0.818 n=6)
ResourceSelectorConfigs/name_and_type-4                    216.4µ ±  6%   213.8µ ±   4%       ~ (p=0.310 n=6)
ResourceSelectorConfigs/tags-4                             59.93m ± 50%   33.30m ± 172%       ~ (p=0.937 n=6)
ResourceSelectorQueryBuild/name-4                          40.78µ ±  1%   41.18µ ±   3%       ~ (p=0.065 n=6)
ResourceSelectorQueryBuild/name_and_type-4                 60.68µ ± 10%   60.25µ ±   8%       ~ (p=0.937 n=6)
ResourceSelectorQueryBuild/tags-4                          16.71µ ±  1%   16.32µ ±   0%  -2.38% (p=0.002 n=6)
geomean                                                    518.4µ         487.6µ         -5.95%

[github-actions]

Benchstat (RLS)

Base: bfce08648e01652ac7c0afa6b2a94f8382099d7b
Head: 023cf593aba4b6a0717d8bd7742ee214587095ea

📊 8 minor regression(s) (all within 5% threshold)

Benchmark	Base	Head	Change	p-value
RLS/Sample-15000/configs/Without_RLS-4	7.178m	7.391m	+2.97%	0.002
RLS/Sample-15000/analysis_types/Without_RLS-4	3.397m	3.465m	+2.00%	0.002
RLS/Sample-15000/catalog_changes/With_RLS-4	124.3m	126.4m	+1.63%	0.002
RLS/Sample-15000/config_names/Without_RLS-4	12.41m	12.58m	+1.40%	0.002
RLS/Sample-15000/catalog_changes/Without_RLS-4	4.389m	4.444m	+1.26%	0.041
RLS/Sample-15000/config_summary/With_RLS-4	600.6m	607.2m	+1.09%	0.002
RLS/Sample-15000/change_types/With_RLS-4	4.395m	4.433m	+0.87%	0.002
RLS/Sample-15000/config_types/Without_RLS-4	4.211m	4.242m	+0.73%	0.026

✅ 8 improvement(s)

Benchmark	Base	Head	Change	p-value
RLS/Sample-15000/config_changes/With_RLS-4	128.4m	124.1m	-3.38%	0.002
RLS/Sample-15000/change_types/Without_RLS-4	4.545m	4.420m	-2.76%	0.002
RLS/Sample-15000/config_types/With_RLS-4	121.5m	119.7m	-1.51%	0.002
RLS/Sample-15000/config_summary/Without_RLS-4	91.43m	90.06m	-1.49%	0.002
RLS/Sample-15000/config_detail/Without_RLS-4	4.286m	4.227m	-1.38%	0.002
RLS/Sample-15000/config_names/With_RLS-4	121.5m	120.4m	-0.96%	0.002
RLS/Sample-15000/config_classes/With_RLS-4	119.2m	118.4m	-0.63%	0.004
RLS/Sample-15000/analysis_types/With_RLS-4	3.390m	3.384m	-0.17%	0.041

Full benchstat output

goos: linux
goarch: amd64
pkg: github.com/flanksource/duty/bench
cpu: AMD EPYC 9V74 80-Core Processor                
                                               │ bench-base.txt │          bench-head.txt           │
                                               │     sec/op     │   sec/op     vs base              │
RLS/Sample-15000/catalog_changes/Without_RLS-4      4.389m ± 1%   4.444m ± 2%  +1.26% (p=0.041 n=6)
RLS/Sample-15000/catalog_changes/With_RLS-4         124.3m ± 0%   126.4m ± 0%  +1.63% (p=0.002 n=6)
RLS/Sample-15000/config_changes/Without_RLS-4       4.410m ± 2%   4.413m ± 1%       ~ (p=0.699 n=6)
RLS/Sample-15000/config_changes/With_RLS-4          128.4m ± 1%   124.1m ± 1%  -3.38% (p=0.002 n=6)
RLS/Sample-15000/config_detail/Without_RLS-4        4.286m ± 1%   4.227m ± 0%  -1.38% (p=0.002 n=6)
RLS/Sample-15000/config_detail/With_RLS-4           120.4m ± 0%   120.6m ± 0%       ~ (p=0.132 n=6)
RLS/Sample-15000/config_names/Without_RLS-4         12.41m ± 0%   12.58m ± 0%  +1.40% (p=0.002 n=6)
RLS/Sample-15000/config_names/With_RLS-4            121.5m ± 0%   120.4m ± 0%  -0.96% (p=0.002 n=6)
RLS/Sample-15000/config_summary/Without_RLS-4       91.43m ± 1%   90.06m ± 1%  -1.49% (p=0.002 n=6)
RLS/Sample-15000/config_summary/With_RLS-4          600.6m ± 0%   607.2m ± 0%  +1.09% (p=0.002 n=6)
RLS/Sample-15000/configs/Without_RLS-4              7.178m ± 2%   7.391m ± 1%  +2.97% (p=0.002 n=6)
RLS/Sample-15000/configs/With_RLS-4                 119.2m ± 1%   119.1m ± 0%       ~ (p=0.310 n=6)
RLS/Sample-15000/analysis_types/Without_RLS-4       3.397m ± 1%   3.465m ± 1%  +2.00% (p=0.002 n=6)
RLS/Sample-15000/analysis_types/With_RLS-4          3.390m ± 3%   3.384m ± 0%  -0.17% (p=0.041 n=6)
RLS/Sample-15000/analyzer_types/Without_RLS-4       3.221m ± 3%   3.220m ± 1%       ~ (p=0.589 n=6)
RLS/Sample-15000/analyzer_types/With_RLS-4          3.240m ± 1%   3.223m ± 0%       ~ (p=0.132 n=6)
RLS/Sample-15000/change_types/Without_RLS-4         4.545m ± 1%   4.420m ± 1%  -2.76% (p=0.002 n=6)
RLS/Sample-15000/change_types/With_RLS-4            4.395m ± 0%   4.433m ± 1%  +0.87% (p=0.002 n=6)
RLS/Sample-15000/config_classes/Without_RLS-4       3.515m ± 1%   3.512m ± 0%       ~ (p=0.699 n=6)
RLS/Sample-15000/config_classes/With_RLS-4          119.2m ± 0%   118.4m ± 0%  -0.63% (p=0.004 n=6)
RLS/Sample-15000/config_types/Without_RLS-4         4.211m ± 2%   4.242m ± 2%  +0.73% (p=0.026 n=6)
RLS/Sample-15000/config_types/With_RLS-4            121.5m ± 0%   119.7m ± 0%  -1.51% (p=0.002 n=6)
geomean                                             18.28m        18.27m       -0.05%

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	golang.org/​x/​exp@​v0.0.0-20260218203240-3dfff04db8fa ⏵ v0.0.0-20260410095643-746e56fc9e2f

View full report