build: Update module github.com/go-git/go-git/v6 to v6.0.0-alpha.4

[go-git-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/go-git/go-git/v6	v6.0.0-alpha.3.0.20260512141313-533ba09d9588 → v6.0.0-alpha.4

---

Release Notes

go-git/go-git (github.com/go-git/go-git/v6)

v6.0.0-alpha.4

Compare Source

What's Changed

• plumbing: transport/ssh, Shell-quote path and args by @​hiddeco in #​2067
• git: submodule, canonical remote for relative URLs by @​hiddeco in #​2071
• storage: filesystem, Use repository object format for writing loose objects by @​pjbgf in #​2073
• git: submodule, error on remote without URLs by @​hiddeco in #​2076
• plumbing: objfile, Pass object format into Reader by @​pjbgf in #​2077
• git: submodule, Add relative URL regression tests by @​hiddeco in #​2072
• plumbing: format/idxfile, Validate offset64 indices by @​hiddeco in #​2083
• storage: filesystem, Search alternates in HashesWithPrefix by @​andrew in #​2087
• *: Reject malformed variable-length integers by @​hiddeco in #​2090
• Add worktreeFilesystem wrapper for worktree by @​pjbgf in #​2081
• tests: fix three recurring CI flakes by @​hiddeco in #​2093
• plumbing: format/packfile, Test patchDeltaWriter cap by @​hiddeco in #​2086
• plumbing: format/packfile, Tighten delta validation by @​hiddeco in #​2089
• git: worktree path hardening by @​hiddeco in #​2097
• build: Update module github.com/go-git/go-git-fixtures/v6 to v6.0.0-20260502205956-66bffbe5a6ff (main) by @​go-git-renovate[bot] in #​2102
• build: Update golang (main) by @​go-git-renovate[bot] in #​2099
• config: validate submodule names by @​hiddeco in #​2079
• build: Update go-git (main) by @​go-git-renovate[bot] in #​2103
• worktree: skip ignored directories during Reset walk by @​Soph in #​2075
• plumbing: format/pktline, validate reader/writer inputs by @​pjbgf in #​2104
• build: Update module github.com/go-git/go-git-fixtures/v6 to v6.0.0-alpha.1 (main) by @​go-git-renovate[bot] in #​2110
• plumbing: object, tree entry validation by @​hiddeco in #​2105
• git: Stop validating symlink target paths by @​pjbgf in #​2114
• git: Allow MkdirAll on worktree-root paths by @​hiddeco in #​2115
• git: add repository and remote archive support by @​aymanbagabas in #​2013
• Fix file handle leaks by calling Repository.Close() and adding transactional.Storage.Close() by @​AriehSchneier in #​1999
• plumbing: fuzz on-disk format decoders by @​hiddeco in #​2120
• plumbing: format decoder input bounds and contracts by @​hiddeco in #​2119
• plumbing: fuzz packp and capability decoders by @​hiddeco in #​2121
• storage: dotgit, fix hasIncomingObjects race by @​hiddeco in #​2131
• plumbing: format/packfile, use ReadAt in FSObject.Reader() for concurrency safety. by @​cedric-appdirect in #​1998
• plumbing: format/packfile, harden malformed pack handling by @​pjbgf in #​2113

New Contributors

• @​andrew made their first contribution in #​2087

Full Changelog: go-git/go-git@v6.0.0-alpha.3...v6.0.0-alpha.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[pjbgf]

@copilot Fix the build issue:

cmd/gogit/show-index.go:32:28: cannot use in (variable of interface type io.Reader) as "github.com/go-git/go-git/v6/plumbing/format/idxfile".Input value in argument to idxfile.NewDecoder: io.Reader does not implement "github.com/go-git/go-git/v6/plumbing/format/idxfile".Input (missing method Stat)

[Copilot]

@copilot Fix the build issue:

cmd/gogit/show-index.go:32:28: cannot use in (variable of interface type io.Reader) as "github.com/go-git/go-git/v6/plumbing/format/idxfile".Input value in argument to...

Fixed in 0e358b3. show-index now adapts stdin to the new idxfile.Input API by buffering input and supplying a valid Stat() size, so it builds and runs correctly with go-git/v6.0.0-alpha.4.

[go-git-renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.