Bump mvdan.cc/sh/v3 from 3.9.0 to 3.11.0 in /tools/workflow/linters

[dependabot]

Bumps mvdan.cc/sh/v3 from 3.9.0 to 3.11.0.

Release notes

Sourced from mvdan.cc/sh/v3's releases.

v3.11.0

This release drops support for Go 1.22 and includes many enhancements.

• cmd/shfmt
  • Support -l=0 and -f=0 to split filenames with null bytes - #1096
• syntax
  • New iterator API: Parser.WordsSeq
  • Fix Parser.Incomplete and IsIncomplete to work well with Parser.Words - #937
  • Initial support for parsing incomplete shell via RecoverErrors
  • Expand LangError to include which language was used when parsing
• interp
  • Refactor setting variables to fix array declaration edge cases - #1108
  • Fix test read/write/exec operators to work correctly on directories - #1116
  • Replace the cancelreader dependency with os.File.SetReadDeadline
  • Avoid waiting for process substitutions, matching Bash
  • Skip OpenHandler when opening named pipes for process substitutions - #1120
  • Use TMPDIR if set via Env to create temporary files such as named pipes
• expand
  • New iterator API: FieldsSeq
  • Correctly handle repeated backslashes in double quotes - #1106
  • Don't expand backslashes inside here-documents - #1070

Consider becoming a sponsor if you benefit from the work that went into this release!

Binaries built on go version go1.24.0 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s -X=main.version=v3.11.0"

v3.10.0

• cmd/shfmt
  • Report the correct language variant in parser error messages - #1102
  • Move --filename out of the parser options category - #1079
• syntax
  • Parse all CRLF line endings as LF, including inside heredocs - #1088
  • Count skipped backslashes inside backticks in position column numbers - #1098
  • Count skipped null bytes in position column numbers for consistency
• interp
  • Fix a regression in v3.9.0 which broke redirecting files to stdin - #1099
  • Fix a regression in v3.9.0 where HandlerContext.Stdin was never nil
  • Add an Interactive option to be used by interactive shells - #1100
  • Support closing stdin, stdout, and stderr via redirections like <&-

Consider becoming a sponsor if you benefit from the work that went into this release!

Binaries built on go version go1.23.2 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s -X=main.version=v3.10.0"

Changelog

Sourced from mvdan.cc/sh/v3's changelog.

[3.11.0] - 2025-03-05

This release drops support for Go 1.22 and includes many enhancements.

• cmd/shfmt
  • Support -l=0 and -f=0 to split filenames with null bytes - #1096
• syntax
  • New iterator API: Parser.WordsSeq
  • Fix Parser.Incomplete and IsIncomplete to work well with Parser.Words - #937
  • Initial support for parsing incomplete shell via RecoverErrors
  • Expand LangError to include which language was used when parsing
• interp
  • Refactor setting variables to fix array declaration edge cases - #1108
  • Fix test read/write/exec operators to work correctly on directories - #1116
  • Replace the cancelreader dependency with os.File.SetReadDeadline
  • Avoid waiting for process substitutions, matching Bash
  • Skip OpenHandler when opening named pipes for process substitutions - #1120
  • Use TMPDIR if set via Env to create temporary files such as named pipes
• expand
  • New iterator API: FieldsSeq
  • Correctly handle repeated backslashes in double quotes - #1106
  • Don't expand backslashes inside here-documents - #1070

Consider becoming a sponsor if you benefit from the work that went into this release!

[3.10.0] - 2024-10-20

• cmd/shfmt
  • Report the correct language variant in parser error messages - #1102
  • Move --filename out of the parser options category - #1079
• syntax
  • Parse all CRLF line endings as LF, including inside heredocs - #1088
  • Count skipped backslashes inside backticks in position column numbers - #1098
  • Count skipped null bytes in position column numbers for consistency
• interp
  • Fix a regression in v3.9.0 which broke redirecting files to stdin - #1099
  • Fix a regression in v3.9.0 where HandlerContext.Stdin was never nil
  • Add an Interactive option to be used by interactive shells - #1100
  • Support closing stdin, stdout, and stderr via redirections like <&-

Consider becoming a sponsor if you benefit from the work that went into this release!

Commits

• 8a52daa CHANGELOG: add entry for v3.11.0
• 5d53055 interp: skip handler test using process substitutions on Windows
• aa99590 interp: only obey TMPDIR if it is an absolute dir
• fdbd6e1 update all dependencies
• 28603a4 interp: do not hard-code the use of os.TempDir for named pipes
• cce5c1c interp: do not open our own ProcSubst FIFO files via OpenHandler
• b5c9298 interp: test process substitutions with an OpenHandler
• 422f987 fileutil: shebang detection improvements
• b87b838 syntax: use LangError consistently and add a LangUsed field
• cbc2c7b syntax: make IsIncomplete more robust
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

This PR is stale because it has been open 30 days with no activity.