build(deps): bump github.com/go-git/go-git/v5 from 5.2.0 to 5.4.2

[dependabot]

Bumps github.com/go-git/go-git/v5 from 5.2.0 to 5.4.2.

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.4.2

Change Log

• Revert "plumbing: format/packfile, prevent large objects from being read into memory completely (#303) (da81027)

v5.4.1

Change Log

• remote: patch default timeout for List from 600ms to 10s (#321)

v5.4.0

Change Log

• Repository: test, use raw string to avoid double-escape #288 (jeffwidman)
• Remote: new ListContext function #278 (xiujuan95)
• Remote: add support for deepening shallow clones #311 (marwatk)
• Submodele, fetch submodules pointing to orphaned but still reachable commits #284 (edigaryev)
• plumbing: object/patch, printStat strings.Repeat cause panic #310 (cookeem)
• plumbing: format/packfile, prevent large objects from being read into memory completely #303 (zeripath)
• plumbing: transport/ssh, support more formats in NewPublicKeys SSH helper #298 (hiddeco)
• *: replace golang.org/x/crypto/openpgp by github.com/ProtonMail/go-crypto/openpgp #283 (johanfleury)
• *: typo fixes #291 (jeffwidman)
• *: minor doc fixes #287 (jeffwidman)
• *: remove unused unexported const #286 (jeffwidman)

v5.3.0

Change Log

• transport: ssh, fix cloning large repositories #272 (dcu)
• diff: Allow srcPrefix and dstPrefix to be configured #265 (yabberyabber)
• Remote: add RequireRemoteRefs to PushOptions #258 (asuffield)
• plumbing: gitignore, Fix gitconfig path in LoadSystemPatterns doc #256 (andrewarchi)
• plumbing: wire up contexts for Transport.AdvertisedReferences #246 (asuffield)
• worktree: Don't remove root directory when cleaning #230 (hansmi)
• *: add insecureSkipTLS and cabundle #228 (StrongMonkey)
• git: worktree_commit, just store objects not already stored #224 (jsteuer)
• plumbing: packp: adding "object-format" and "filter" capabilities #222 (rofc)
• Submodule: fix relative submodule resolution #195 (adracus)
• git: worktree, Support relative submodule URL. #184 (mikyk10)
• config: add init.defaultBranch to the config #178 (tomlazar)
• config: support insteadOf for remotes' URLs #79 (kostyay)

Commits

• da81027 Revert "plumbing: format/packfile, prevent large objects from being read into...
• db4233e remote: patch default timeout for List (#321)
• 720c192 plumbing: format/packfile, prevent large objects from being read into memory ...
• e6e2339 plumbing: object/patch, printStat strings.Repeat cause panic (#310)
• 320db9a git: Add support for deepening shallow clones (#311)
• db2bc57 plumbing: transport/http, skip flaky test
• c12f5b6 go modules: update go-git-fixtures
• 01df753 *: use go-billy instead of os calls
• 67af9d7 utils: ioutil, Pipe implementatio
• c69d533 plumbing: format, use os.UserHomeDir()
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

Merging #805 (4791901) into master (0f04942) will increase coverage by 4.67%.
The diff coverage is 62.36%.

@@            Coverage Diff             @@
##           master     #805      +/-   ##
==========================================
+ Coverage   49.27%   53.94%   +4.67%     
==========================================
  Files          23       23              
  Lines        2401     2697     +296     
==========================================
+ Hits         1183     1455     +272     
- Misses       1090     1093       +3     
- Partials      128      149      +21     

Impacted Files	Coverage Δ
pkg/container/docker_build.go	0.00% <0.00%> (ø)
pkg/container/docker_run.go	1.76% <0.00%> (-0.17%)	⬇️
pkg/common/git.go	52.55% <30.88%> (-7.24%)	⬇️
pkg/runner/runner.go	68.96% <33.33%> (-7.51%)	⬇️
pkg/model/planner.go	52.14% <43.33%> (+19.06%)	⬆️
pkg/model/workflow.go	51.08% <62.68%> (+25.37%)	⬆️
pkg/container/docker_pull.go	36.17% <64.70%> (+17.98%)	⬆️
pkg/runner/expression.go	85.38% <71.87%> (-1.26%)	⬇️
pkg/runner/step_context.go	78.92% <79.90%> (+9.97%)	⬆️
pkg/runner/run_context.go	79.70% <91.86%> (+3.29%)	⬆️
... and 7 more

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 6d7f574...4791901. Read the comment docs.

[mergify]

@dependabot[bot] this pull request is now in conflict 😩

[mergify]

@dependabot[bot] this pull request has failed checks 🛠

[catthehacker]

@dependabot rebase

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

[mergify]

@dependabot[bot] this pull request is now in conflict 😩

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.