build(deps): bump the go-dependencies group across 1 directory with 7 updates

[dependabot]

Bumps the go-dependencies group with 4 updates in the / directory: github.com/betterleaks/betterleaks, github.com/posthog/posthog-go, golang.org/x/crypto and golang.org/x/mod.

Updates github.com/betterleaks/betterleaks from 1.4.0 to 1.4.1

Release notes

Sourced from github.com/betterleaks/betterleaks's releases.

v1.4.1

What's New

Quick little patch with a few things:

• updated go.mod to use betterleak's go-re2 fork so go install and precommits will work better.
• added some more rules including scaleway and gcp
• added hugging face source
• fixed secret redaction

Changelog

• 857e3400d4eebdee74f9219a80bf3983262ae48d Add Contributor Covenant Code of Conduct (#161)
• fd5f4d00ff63660fbcea9fbb6671ba7ae3706ccb Update README with Betterleaks config recommendations
• 40d5cafea2045d16a217c1b70a69d6bba6b892ec bump go.mod and ver check in release worfklow (#167)
• e66c46251c5116d512cb230527d6413d3f990f10 fix: centralize secret redaction in report path for all scan sources (#157)
• 262fdfb523768ef7d579bdd157ce17e15b5f5d89 gcp service tokens and app default creds (#164)
• e86c443ea99af7d44c901a21e73c161656482dfd hugging face source (#165)
• 83adb3dab2c3dc8485f991af7046ae2aec871726 move mds
• 3ac987600af0b4c752507f081ccdd1c9a6e7e085 scaleway rule (#106)
• 54243c8f5bcbae5b6e54c896eae95673bf703244 use go-re2 fork (#166)

Commits

• 40d5caf bump go.mod and ver check in release worfklow (#167)
• 54243c8 use go-re2 fork (#166)
• 3ac9876 scaleway rule (#106)
• e66c462 fix: centralize secret redaction in report path for all scan sources (#157)
• e86c443 hugging face source (#165)
• 262fdfb gcp service tokens and app default creds (#164)
• 83adb3d move mds
• 857e340 Add Contributor Covenant Code of Conduct (#161)
• fd5f4d0 Update README with Betterleaks config recommendations
• See full diff in compare view

Updates github.com/posthog/posthog-go from 1.13.2 to 1.15.0

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.15.0

Unreleased

1.14.0

Unreleased

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.15.0

Minor Changes

• 64ad172: Support the early_exit flag filter in local evaluation. When a flag's filters.early_exit is true and a condition group's property filters match (or there are none) but the rollout percentage excludes the user, evaluation now stops and returns false immediately instead of falling through to later groups. Mirrors the server-side (Rust) evaluation engine. A property-filter mismatch still falls through as before, and behaviour is unchanged when early_exit is unset or false.

Minor Changes

• Support the early_exit option on feature flag filters during local evaluation. When a flag has filters.early_exit set to true and a condition group matches its property filters (or has none) but the rollout percentage excludes the user, local evaluation now returns a definitive disabled result immediately instead of falling through to later condition groups, mirroring the server-side evaluation engine. Property-filter mismatches continue to fall through as before, and behaviour is unchanged when early_exit is absent or false.

1.14.0

Minor Changes

• 554c99a: Add a configurable $is_server event property (default true) so PostHog can identify server-side events. Set IsServer: false when using posthog-go as a client/CLI so the device OS is attributed normally.

Commits

• 1a54557 chore: release v1.15.0 [version bump] [skip ci]
• 64ad172 feat(feature-flags): support early_exit in local evaluation (#217)
• 1f1f2fa chore: release v1.14.0 [version bump] [skip ci]
• 554c99a feat: emit $is_server property on captured events (#215)
• See full diff in compare view

Updates golang.org/x/crypto from 0.52.0 to 0.53.0

Commits

• 45460e0 go.mod: update golang.org/x dependencies
• d37c95e pkcs12: limit PBKDF iteration count to prevent CPU exhaustion
• e2ffffe ssh: reject incomplete gssapi-with-mic configurations
• 60e158a ssh/test: isolate CLI tests from user SSH config and agent
• 1b77d23 ssh/knownhosts: reject lines with multiple or unknown markers
• 3872a2b ssh/knownhosts: verify declared key type matches decoded key
• 9f72ecc ssh/knownhosts: treat only ASCII space and tab as whitespace
• 8f405a4 ssh: validate ECDSA curve matches expected algorithm
• bb41b3d ssh: improve DH GEX group selection using PreferredBits
• e04e721 ssh/agent: validate ed25519 private key length in Add
• Additional commits viewable in compare view

Updates golang.org/x/mod from 0.36.0 to 0.37.0

Commits

• deb1dfc go.mod: update golang.org/x dependencies
• 087f651 modfile: use slices.Backward
• 343ee60 x/mod: allow for aggressively conslidating requires
• See full diff in compare view

Updates golang.org/x/sync from 0.20.0 to 0.21.0

Commits

• 5071ed6 all: fix some comments to improve readability
• See full diff in compare view

Updates golang.org/x/sys from 0.45.0 to 0.46.0

Commits

• d58dcfa unix: add GPIO constants and structs
• See full diff in compare view

Updates golang.org/x/term from 0.43.0 to 0.44.0

Commits

• 3b43943 go.mod: update golang.org/x dependencies
• See full diff in compare view