chore Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/bmatcuk/doublestar/v4	v4.10.0 → v4.10.2			require	patch
github/codeql-action	v4.38.0 → v4.38.2			action	patch
golangci/golangci-lint	v2.13.2 → v2.14.0			uses-with	minor

---

Release Notes

bmatcuk/doublestar (github.com/bmatcuk/doublestar/v4)

v4.10.2: Better support for Windows "Junctions"

Compare Source

Has improved support for reading "junctions" in Windows (ie, Windows' version of symlinks).

Thanks @​x0Lazarus for the PR!

What's Changed

• Fix Windows junction traversal with Go 1.23 and later by @​x0Lazarus in #​117

New Contributors

• @​x0Lazarus made their first contribution in #​117

Full Changelog: bmatcuk/doublestar@v4.10.1...v4.10.2

v4.10.1: Fixed issue with alternatives and character classes

Compare Source

There was an issue where commas or ending curly brackets inside a character class would cause code looking for the next alternative (commas) or the end of alternatives (ending curly brackets) to erroneously match those characters inside the character classes.

Thanks to @​sidsri14 for the fix!

What's Changed

• fix brace alternation scanning with character classes by @​sidsri14 in #​115

New Contributors

• @​sidsri14 made their first contribution in #​115

Full Changelog: bmatcuk/doublestar@v4.10.0...v4.10.1

github/codeql-action (github/codeql-action)

v4.38.2

Compare Source

• Update default CodeQL bundle version to 2.27.1. #​4160

v4.38.1

Compare Source

• The CodeQL Action now has experimental support for CodeQL releases for which per-language bundles are available. Per-language bundles support analysis for a single language and are therefore smaller than the combined bundles that allow analysis for all supported languages. As a result, per-language bundles take up less space on disk and are faster to download. We expect to roll this change out to everyone in the coming weeks. #​4146

golangci/golangci-lint (golangci/golangci-lint)

v2.14.0

Compare Source

Released on 2026-09-24

1. Bug fixes
   • fix: cache of facts reloading
2. Linters new features or changes
   • bodyclose: from 73d1f95 to 857993a (new directive handled)
   • exhaustive: from 0.12.0 to 0.13.0
   • exhaustruct_v5: from 5.0.3 to 5.2.0 (new option: allow-empty-blank-assignments)
   • go-check-sumtype: from 0.3.1 to ae6904d
   • gocritic: from 0.14.4 to 0.15.0
   • gofumpt: from 0.11.0 to 0.12.0
   • gomoddirectives: from 0.9.0 to 0.10.0
   • gosec: from 2.28.0 to 2.29.0 (re-enable G407)
   • govet-modernize: from 0.49.0 to 0.50.0
   • loggercheck: from 0.11.0 to 0.12.0
   • revive: from 1.15.0 to 1.17.0 (new rules: marshal-receiver, multiline-if-init, use-slices-concat)
   • tagliatelle: from 0.7.2 to 0.8.0
3. Linters bug fixes
   • fatcontext: from 0.10.0 to 0.10.1
   • flock: from 0.13.0 to 0.13.1
   • godoclint: from 0.11.2 to 0.11.4
   • protogetter: from 0.3.21 to 1.0.1
   • recvcheck: from 0.3.0 to 0.3.1
   • tagalign: from 1.4.3 to 1.4.4

---

Configuration

📅 Schedule: (in timezone Europe/Athens)

• Branch creation
  • "before 4am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: d13001d8-0b50-45e4-8aaf-121091e3d4c1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}