build(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0 in /hack/tools

[dependabot]

Bumps github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0.

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.9.0

What's Changed

• Use path.Clean instead of filepath.Clean in iofs.Open by @​puerco in go-git/go-billy#197
• Deprecate ChrootOS in favour of BoundOS by @​pjbgf in go-git/go-billy#201
• General Improvements by @​pjbgf in go-git/go-billy#203
• osfs: ChrootOS eval baseDir on creation by @​pjbgf in go-git/go-billy#205
• Run go-git tests as part of integration tests by @​pjbgf in go-git/go-billy#206

Full Changelog: go-git/go-billy@v5.8.0...v5.9.0

Commits

• 237e529 Merge pull request #206 from pjbgf/v5-improvements
• 04edb39 build: Add go-git integration test
• d8efefd osfs: preserve empty ChrootOS base
• 07f2a0b Merge pull request #205 from pjbgf/v5-improvements
• 25207c8 build: Bump Go versions in workflows
• 2fda229 osfs: ChrootOS eval baseDir on creation
• 427b27f Merge pull request #203 from pjbgf/v5-improvements
• 7d5a23e chroot: Reject symlink loops
• 2c2287a util: avoid following symlinks in RemoveAll fallback
• cbd88e9 Fix mount path handling
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by CodeRabbit

• Chores
  • Upgraded multiple development tooling dependencies to their latest compatible versions, including core system libraries, cryptographic packages, and networking modules. These updates improve platform compatibility, provide security enhancements, and ensure stable, optimized performance across the development environment.

[openshift-merge-bot]

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

[coderabbitai]

📝 Walkthrough

Walkthrough

This PR updates various Go module dependencies in hack/tools/go.mod, including bumping golang.org/x/mod from v0.34.0 to v0.35.0, upgrading direct dependencies like github.com/cyphar/filepath-securejoin from v0.6.0 to v0.6.1 and github.com/go-git/go-billy/v5 from v5.8.0 to v5.9.0, and advancing several indirect golang.org/x/* module versions (crypto, net, sys, term, text, tools, and exp).

Possibly related PRs

• openshift/hypershift#8334: Modifies hack/tools/go.mod with overlapping dependency updates including github.com/go-git/go-billy/v5 and other indirect modules.
• openshift/hypershift#8077: Updates hack/tools/go.mod with overlapping golang.org/x/* module versions including golang.org/x/mod.
• openshift/hypershift#8410: Bumps the same golang.org/x/net (v0.53.0) and golang.org/x/text (v0.36.0) versions in Go module files.

Suggested reviewers

• jparrill
• Nirshal
• csrwng

---

Important

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

❌ Failed checks (1 error)

Check name	Status	Explanation	Resolution
Stable And Deterministic Test Names	❌ Error	PR contains 12 instances of dynamic Ginkgo test names using fmt.Sprintf with workload.Name in test/e2e/v2/tests/control_plane_infrastructure_test.go and control_plane_workloads_test.go	Remove fmt.Sprintf from test names. Use static descriptive names like "should have resource requests for containers" instead of interpolating workload.Name into test titles. Place dynamic values in test bodies only.

✅ Passed checks (11 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately describes the main change: bumping github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0, which is the primary dependency update in the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Test Structure And Quality	✅ Passed	This PR is a dependency update with no test code changes. The custom check for Ginkgo test quality is not applicable to go.mod dependency updates.
Microshift Test Compatibility	✅ Passed	This PR only updates Go module dependencies in hack/tools/go.mod. No new Ginkgo e2e tests are added. The MicroShift compatibility check only applies when new tests are introduced.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	This PR is a dependency update that only modifies hack/tools/go.mod and go.sum. No new Ginkgo e2e tests are added. The SNO test compatibility check is not applicable.
Topology-Aware Scheduling Compatibility	✅ Passed	PR only updates Go module dependencies. No deployment manifests, operator code, or controllers modified. Topology-aware scheduling check not applicable.
Ote Binary Stdout Contract	✅ Passed	PR only modifies hack/tools/go.mod (build dependencies), not application source code. No process-level code changes that could violate OTE Binary Stdout Contract.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	This PR only updates Go module dependencies in hack/tools/go.mod and does not add any new Ginkgo e2e tests. The custom check applies only to newly added tests, so it is not applicable here.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/hack/tools/github.com/go-git/go-billy/v5-5.9.0

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign devguyio for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@dependabot[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[openshift-ci]

rebase

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[dependabot]

Looks like github.com/go-git/go-billy/v5 is up-to-date now, so this is no longer needed.