build: Update module github.com/go-git/go-git/v6 to v6.0.0-alpha.4

[go-git-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/go-git/go-git/v6	v6.0.0-alpha.3.0.20260512141313-533ba09d9588 → v6.0.0-alpha.4

---

Release Notes

go-git/go-git (github.com/go-git/go-git/v6)

v6.0.0-alpha.4

Compare Source

What's Changed

• plumbing: transport/ssh, Shell-quote path and args by @​hiddeco in #​2067
• git: submodule, canonical remote for relative URLs by @​hiddeco in #​2071
• storage: filesystem, Use repository object format for writing loose objects by @​pjbgf in #​2073
• git: submodule, error on remote without URLs by @​hiddeco in #​2076
• plumbing: objfile, Pass object format into Reader by @​pjbgf in #​2077
• git: submodule, Add relative URL regression tests by @​hiddeco in #​2072
• plumbing: format/idxfile, Validate offset64 indices by @​hiddeco in #​2083
• storage: filesystem, Search alternates in HashesWithPrefix by @​andrew in #​2087
• *: Reject malformed variable-length integers by @​hiddeco in #​2090
• Add worktreeFilesystem wrapper for worktree by @​pjbgf in #​2081
• tests: fix three recurring CI flakes by @​hiddeco in #​2093
• plumbing: format/packfile, Test patchDeltaWriter cap by @​hiddeco in #​2086
• plumbing: format/packfile, Tighten delta validation by @​hiddeco in #​2089
• git: worktree path hardening by @​hiddeco in #​2097
• build: Update module github.com/go-git/go-git-fixtures/v6 to v6.0.0-20260502205956-66bffbe5a6ff (main) by @​go-git-renovate[bot] in #​2102
• build: Update golang (main) by @​go-git-renovate[bot] in #​2099
• config: validate submodule names by @​hiddeco in #​2079
• build: Update go-git (main) by @​go-git-renovate[bot] in #​2103
• worktree: skip ignored directories during Reset walk by @​Soph in #​2075
• plumbing: format/pktline, validate reader/writer inputs by @​pjbgf in #​2104
• build: Update module github.com/go-git/go-git-fixtures/v6 to v6.0.0-alpha.1 (main) by @​go-git-renovate[bot] in #​2110
• plumbing: object, tree entry validation by @​hiddeco in #​2105
• git: Stop validating symlink target paths by @​pjbgf in #​2114
• git: Allow MkdirAll on worktree-root paths by @​hiddeco in #​2115
• git: add repository and remote archive support by @​aymanbagabas in #​2013
• Fix file handle leaks by calling Repository.Close() and adding transactional.Storage.Close() by @​AriehSchneier in #​1999
• plumbing: fuzz on-disk format decoders by @​hiddeco in #​2120
• plumbing: format decoder input bounds and contracts by @​hiddeco in #​2119
• plumbing: fuzz packp and capability decoders by @​hiddeco in #​2121
• storage: dotgit, fix hasIncomingObjects race by @​hiddeco in #​2131
• plumbing: format/packfile, use ReadAt in FSObject.Reader() for concurrency safety. by @​cedric-appdirect in #​1998
• plumbing: format/packfile, harden malformed pack handling by @​pjbgf in #​2113

New Contributors

• @​andrew made their first contribution in #​2087

Full Changelog: go-git/go-git@v6.0.0-alpha.3...v6.0.0-alpha.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.