fix(deps): update go-minor-patch

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/buildkite/go-buildkite/v5	v5.13.0 → v5.15.0
github.com/posthog/posthog-go	v1.24.3 → v1.24.4
github.com/vektah/gqlparser/v2	v2.5.36 → v2.5.37

---

Release Notes

buildkite/go-buildkite (github.com/buildkite/go-buildkite/v5)

v5.15.0

Compare Source

• Add Teams to CreatePipeline #​374 (JuanitoFatas)
• Add TestSuitesService.ListByPipeline #​375 (malclocke)
• Return test metrics from TestsService.Get #​373 (malclocke)
• Support min_executions when listing tests #​372 (meghan-kradolfer)
• Update changelog for v5.14.0 #​365 (nethsix)

v5.14.0

Compare Source

• Update changelog for v5.13.0 #​363 (meghan-kradolfer)
• Add JobStateCounts to Build #​364 (nethsix)

posthog/posthog-go (github.com/posthog/posthog-go)

v1.24.4: 1.24.4

Compare Source

Unreleased

vektah/gqlparser (github.com/vektah/gqlparser/v2)

v2.5.37

Compare Source

Changelog

• Fix default values for inline variable fields by @​surbhi-singh in #​447
• fix(validator): Reject non-null input cycles by @​romshark in #​456
• validator: add opt-in source-aware validation errors by @​virgil-king in #​461
• Update and pin by @​StevenACoffman in #​462
• Add Go releaser and SBOM by @​StevenACoffman in #​463
• build(deps): bump the actions-deps group in /validator/imported with 2 updates by @​dependabot[bot] in #​446
• build(deps): bump brace-expansion from 5.0.6 to 5.0.9 in /validator/imported by @​dependabot[bot] in #​455
• build(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 in the actions-deps group across 1 directory by @​dependabot[bot] in #​452
• build(deps): bump actions/setup-go from 6 to 7 in the actions-deps group across 1 directory by @​dependabot[bot] in #​450
• build(deps): bump the actions-deps group across 1 directory with 3 updates by @​dependabot[bot] in #​453
• build(deps): bump js-yaml from 5.2.3 to 5.4.1 in /validator/imported in the actions-deps group across 1 directory by @​dependabot[bot] in #​458
• build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 in the actions-deps group across 1 directory by @​dependabot[bot] in #​457

New Contributors

• @​surbhi-singh made their first contribution in #​447
• @​romshark made their first contribution in #​456
• @​virgil-king made their first contribution in #​461

Full Changelog: vektah/gqlparser@v2.5.36...v2.5.37

Verifying this release

# 1. cosign signature over the checksum file (identity = the release workflow).
cosign verify-blob \
  --bundle checksums.txt.sigstore.json \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity 'https://github.com/StevenACoffman/gqlparser/.github/workflows/release.yml@refs/tags/v2.5.37' \
  checksums.txt

# 2. source tarball + SBOM hash to the now-trusted checksums.
shasum -a 256 -c checksums.txt

# 3. GitHub build provenance.
gh attestation verify gqlparser_2.5.37_source.tar.gz --repo StevenACoffman/gqlparser

The SBOM is gqlparser_2.5.37_source.tar.gz.sbom.json (SPDX-2.3).

---

Released by GoReleaser.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Monday through Friday (* * * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github.com/​buildkite/​go-buildkite/​v5@​v5.13.0 ⏵ v5.15.0	+1
	github.com/​posthog/​posthog-go@​v1.24.3 ⏵ v1.24.4	+1
	github.com/​vektah/​gqlparser/​v2@​v2.5.36 ⏵ v2.5.37

View full report

[ashmckenzie]

#977 aims to fix CI failures here and unblock this PR 🙏