build(deps): update lima-vm/lima to v2.1.4

This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [lima-vm/lima](https://github.com/lima-vm/lima) | patch | `v2.1.2` → `v2.1.4` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>lima-vm/lima (lima-vm/lima)</summary>

### [`v2.1.4`](https://github.com/lima-vm/lima/releases/tag/v2.1.4)

[Compare Source](lima-vm/lima@v2.1.3...v2.1.4)

#### Changes

- Cherry-picks from `master` to `release/2.1`
  - Only add xorrisofs flag to the xorrisofs command  ([#&#8203;5129](lima-vm/lima#5129), thanks to [@&#8203;afbjorklund](https://github.com/afbjorklund))
  - fix(qemu): fallback from hvf to tcg on macOS ([#&#8203;5137](lima-vm/lima#5137), thanks to [@&#8203;kavirakesh14](https://github.com/kavirakesh14))
  - nerdctl: update from v2.3.3 to [v2.3.4](https://github.com/containerd/nerdctl/releases/tag/v2.3.4) ([#&#8203;5169](lima-vm/lima#5169))
  - templates: update ([#&#8203;5170](lima-vm/lima#5170))
  - templates/freebsd-15: support 9p mounts ([#&#8203;5172](lima-vm/lima#5172))
  - cmd/limactl: include name in network list `--json` output ([#&#8203;5179](lima-vm/lima#5179), thanks to [@&#8203;coulof](https://github.com/coulof))

Full changes: <https://github.com/lima-vm/lima/milestone/73?closed=1>

#### Usage

```console
$ limactl create
$ limactl start
...
INFO[0029] READY. Run `lima` to open the shell.

$ lima uname
Linux
```

***

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: <https://github.com/lima-vm/lima/actions/runs/28630554371>

The sha256sum of the SHA256SUMS file itself is `8bd82f03bc23acafc7e129fdbcbd9401b50eee2723817b8127f16dee3aebef92` .

***

Release manager: [@&#8203;AkihiroSuda](https://github.com/AkihiroSuda)

### [`v2.1.3`](https://github.com/lima-vm/lima/releases/tag/v2.1.3)

[Compare Source](lima-vm/lima@v2.1.2...v2.1.3)

- Cherry-picks from `master` to `release/2.1` ([#&#8203;5131](lima-vm/lima#5131))
  - limayaml: do not default containerd.user=true on non-Linux guests ([#&#8203;5090](lima-vm/lima#5090), thanks to [@&#8203;gaurav0107](https://github.com/gaurav0107))
  - fix(copytool): fallback to scp for remote source and destination in auto mode ([#&#8203;5097](lima-vm/lima#5097), thanks to [@&#8203;unsuman](https://github.com/unsuman))
  - templates: switch the default image from ubuntu-25.10 to ubuntu-26.04 ([#&#8203;5106](lima-vm/lima#5106))
  - krunkit: disable ssh.overVsock by default ([#&#8203;5123](lima-vm/lima#5123))
  - fix(makefile): propagate build failure for additional drivers ([#&#8203;5125](lima-vm/lima#5125), thanks to [@&#8203;unsuman](https://github.com/unsuman))
  - templates: update ([#&#8203;5130](lima-vm/lima#5130))
  - nerdctl: update from v2.2.2 to v2.3.3 ([#&#8203;5134](lima-vm/lima#5134))
    - [v2.3.0 release note](https://github.com/containerd/nerdctl/releases/tag/v2.3.0)
    - [v2.3.1 release note](https://github.com/containerd/nerdctl/releases/tag/v2.3.1)
    - [v2.3.2 release note](https://github.com/containerd/nerdctl/releases/tag/v2.3.2)
    - [v2.3.3 release note](https://github.com/containerd/nerdctl/releases/tag/v2.3.3)
      - nerdctl v2.3.3 contains [containerd v2.3.2](https://github.com/containerd/containerd/releases/tag/v2.3.2), which fixes CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47262

- Fix CVE-2026-53657 (GHSA-2j9v-p4xj-cjw2) "An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket"

Full changes: <https://github.com/lima-vm/lima/milestone/72>

#### Usage

```console
$ limactl create
$ limactl start
...
INFO[0029] READY. Run `lima` to open the shell.

$ lima uname
Linux
```

***

The binaries were built automatically on GitHub Actions.
The build log is available for 90 days: <https://github.com/lima-vm/lima/actions/runs/27824357138>

The sha256sum of the SHA256SUMS file itself is `ddaf499316c159493ccf853393e35c93d69e8c1f85cb041f6f7e918157625c6c` .

***

Release manager: [@&#8203;AkihiroSuda](https://github.com/AkihiroSuda)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTYuMCIsInVwZGF0ZWRJblZlciI6IjQzLjI1Ni4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiLCJhdXRvbWF0aW9uOmJvdC1hdXRob3JlZCIsImRlcGVuZGVuY3ktdHlwZTo6cGF0Y2giXX0=-->

Author: ECG Bot

chezmoi/dot_config/aquaproj-aqua/aqua.yaml

@@ -110,7 +110,7 @@ packages:
 - name: abiosoft/colima@v0.10.3
   description: Docker (and Kubernetes) on MacOS with minimal setup
   link: https://github.com/abiosoft/colima
-- name: lima-vm/lima@v2.1.2
+- name: lima-vm/lima@v2.1.4
   description: Linux virtual machines, on macOS (aka "Linux-on-Mac", "macOS subsystem for Linux", "containerd for Mac", unofficially)
   link: https://github.com/lima-vm/lima
 - name: BurntSushi/ripgrep@15.1.0