chore(deps): update module github.com/forkcloser/godolint to v0.4.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/forkcloser/godolint	v0.3.0 → v0.4.0

---

Release Notes

forkcloser/godolint (github.com/forkcloser/godolint)

v0.4.0

Compare Source

What's Changed

Changes

• CHANGELOG.md retired: the release notes are the pull request titles by @​closer-claudio in #​82
• Pragmas follow hadolint: stage ignore added, a list with a bad name is no pragma, DL1001 only on ignore= by @​closer-claudio in #​85
• shellcheck follows hadolint: a FROM inherits the stage it names, # hadolint shell= read, exec-form RUN skipped by @​closer-claudio in #​86
• Pin Go 1.27.2 in aqua.yaml ahead of the limen v0.10.0 bump by @​closer-claudio in #​88

Dependencies

• chore(deps): update module github.com/forkcloser/godolint to v0.3.0 by @​renovate[bot] in #​84
• chore(deps): update module github.com/forkcloser/dot to v1.2.1 by @​renovate[bot] in #​83
• chore(deps): update dependency aquaproj/aqua-registry to v4.573.0 by @​renovate[bot] in #​89
• chore(deps): update dependency farcloser/limen to v0.10.1 by @​renovate[bot] in #​90
• fix(deps): update module github.com/mycophonic/primordium to v0.14.0 by @​renovate[bot] in #​70
• fix(deps): update module github.com/moby/buildkit to v0.34.0 by @​renovate[bot] in #​91

Full Changelog: forkcloser/godolint@v0.3.0...v0.4.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
github.com/moby/buildkit	v0.33.1 -> v0.34.0
github.com/mycophonic/primordium	v0.13.0 -> v0.14.0
github.com/sirupsen/logrus	v1.10.1 -> v1.10.2
golang.org/x/sys	v0.48.0 -> v0.49.0

[closer-claudio]

✅ at fcf3448: godolint v0.4.0 in tools/go.mod, its four indirect requirements moving with it, every sum the checksum database's.

• 🔍 Checked: github.com/forkcloser/godolint v0.4.0 h1 and go.mod sums against sum.golang.org by go mod download; the annotated tag v0.4.0 points at 558c7e7 (tagger apostasie, 03:20Z); the other four lines follow it: moby/buildkit v0.34.0, mycophonic/primordium v0.14.0 and golang.org/x/sys v0.49.0 are what godolint v0.4.0s own go.modrequires, andsirupsen/logrus v1.10.2 is what buildkit v0.34.0s requires; each pair verified against sum.golang.org (buildkit, primordium and x/sys earlier this week on the same values, logrus today); the five // indirect lines move together in tools/go.mod, ten lines in tools/go.sum, nothing else in the module files. renovate.json: the App's converge commit rewrites extends from the farcloser/ssh-agent name to forkcloser/openssh and adds the forkcloser App identity to gitIgnoredAuthors, the canonical renovate rule after the transfer, the same two lines #33 carries. Two authors on the branch, Renovate and the App. Verify legs, fuzz, tools and CodeQL green at this head.
• 📝 Conflicts with #33 and #32 on renovate.json by construction; whichever lands second rebases, and a rebase dismisses this approval, which I re-post at the new head.
• 📝 security is red at this head by the lychee links recipe alone: github.com answered 503 on blob links in the canonical AGENTS.md (the storm; farcloser/limen#344 widens the exclusion with the next release). Red is storm only, bypass-safe. Auto-merge is not armed for that reason.

[closer-claudio]

✅ at 8e5db72: godolint v0.4.0 in tools/go.mod, its four indirect requirements moving with it, every sum the checksum database's.

• 🔍 Checked: github.com/forkcloser/godolint v0.4.0 h1 and go.mod sums against sum.golang.org by go mod download; the annotated tag v0.4.0 points at 558c7e7 (tagger apostasie, 03:20Z), release by apostasie; the other four lines follow it: moby/buildkit v0.34.0, mycophonic/primordium v0.14.0 and golang.org/x/sys v0.49.0 are what godolint v0.4.0's own go.mod requires, and sirupsen/logrus v1.10.2 is what buildkit v0.34.0's requires; each pair verified against sum.golang.org (buildkit, primordium and x/sys earlier this week on the same values, godolint and logrus today, the same ten lines #34 and farcloser/limen#347 carry). The five // indirect lines move together in tools/go.mod, ten lines in tools/go.sum, nothing else; one commit, Renovate's. lint, build (the package built and smoke-tested with the bumped tools), tools, gate, security and CodeQL green at this head; the renovate.json lines the first head carried were absorbed by the rebase onto the merged #33.