[ArangoGutierrez]

Problem

Seven Dependabot PRs are open against main. Merged one by one they cost seven CI runs, and the Go module PRs collide on adjacent go.mod lines, forcing a rebase after each merge.

Approach

Cherry-picked each Dependabot commit onto main, keeping dependabot[bot] authorship and the updated-dependencies trailers; every commit is signed and signed off. Workflow bumps first, then Go modules largest-first. The go.mod/go.sum conflicts were context collisions, resolved by keeping the newest version of each module. go mod tidy/vendor were not re-run.

Supersedes:

• chore(deps): Bump github/codeql-action from 4.38.3 to 4.39.1 #906 github/codeql-action 4.38.3 -> 4.39.1 (init and analyze)
• chore(deps): Bump NVIDIA/holodeck from 0.4.0 to 0.5.0 #905 NVIDIA/holodeck 0.4.0 -> 0.5.0 (periodic.yaml)
• chore(deps): Bump golang.org/x/crypto from 0.57.0 to 0.58.0 #901 golang.org/x/crypto 0.57.0 -> 0.58.0
• chore(deps): Bump github.com/urfave/cli/v3 from 3.10.1 to 3.14.0 #902 github.com/urfave/cli/v3 3.10.1 -> 3.14.0
• chore(deps): Bump github.com/stretchr/testify from 1.11.1 to 1.12.1 #900 github.com/stretchr/testify 1.11.1 -> 1.12.1 (no commit of its own: cli 3.14.0 requires the same testify bump, so chore(deps): Bump github.com/urfave/cli/v3 from 3.10.1 to 3.14.0 #902 already contains all of chore(deps): Bump github.com/stretchr/testify from 1.11.1 to 1.12.1 #900)
• chore(deps): Bump github.com/onsi/gomega from 1.42.1 to 1.44.0 #903 github.com/onsi/gomega 1.42.1 -> 1.44.0
• chore(deps): Bump github.com/mattn/go-isatty from 0.0.23 to 0.0.24 #904 github.com/mattn/go-isatty 0.0.23 -> 0.0.24

Testing

• Every path the seven PRs change is byte-identical to its source PR, and nothing else differs from main. The check fails on two mutants.
• go.mod matches vendor/modules.txt for all nine moved modules.
• Pass locally (go1.27.3, darwin/arm64): go build ./..., go vet ./..., go test -race (29 packages, coverage 50.8%), make build-cli, make check-modules, govulncheck ./... (0 reachable).
• Rebased onto fix(sshutil): check the HostKeyCallback error in the flock test #908 (golangci-lint 2.15.0 errcheck fix) and fix(ci): run docs-check on Ruby 4.0 #909 (docs-check Ruby fix). Both CI failures this branch first showed came from main and are fixed there.
• chore(deps): Bump github/codeql-action from 4.38.3 to 4.39.1 #906 was refreshed to 4.39.1 after Dependabot rewrote it; the other six commits are unchanged (identical patch-ids).

Breaking changes

None expected.

[coveralls]

Coverage Report for CI Build 40179123625

Coverage remained the same at 51.849%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	11952
Covered Lines:	6197
Line Coverage:	51.85%
Coverage Strength:	0.52 hits per line

---

💛 - Coveralls