fix(deps): update module github.com/go-sprout/sprout to v1.1.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/go-sprout/sprout	v1.1.0 → v1.1.1

---

Release Notes

go-sprout/sprout (github.com/go-sprout/sprout)

v1.1.1

Compare Source

🌿 Sanding down the rough edges of v1.1.0!

A patch release fixing a broken derivePassword, a data race in shuffle, a division by zero in div, and a hermetic guarantee broken by the v1.1.0 additions.

🐛 Bug Fixes

• derivePassword Returned Empty: The counter was typed uint32, so text/template passed an int and the call panicked, silently swallowed by the SafeCall wrapper. The counter is now an int. This resolves #​157. See PR #​197.
• Concurrency Safe shuffle: shuffle used a package-global math/rand.Source, racing when templates render in parallel. It now uses the concurrency safe math/rand.Shuffle. This resolves #​195. See PR #​196.
• div Division by Zero: A zero divisor returned a bogus integer instead of failing, because the float division was cast after the fact. It now returns cannot divide by zero. See PR #​194.
• Hermetic Map Leaks: dateAgo, uuidv7, randInt and the expandEnv alias were missing from the non-hermetic exclusion list, so HermeticTxtFuncMap and HermeticHtmlFuncMap still exposed them. They are now excluded, and a test keeps the list exhaustive. See PR #​193.

🔒 Security & Dependencies

• Updated go.yaml.in/yaml/v3: Bumped from v3.0.4 to v3.0.5. See #​188.
• CI Maintenance: Bumped actions/setup-go from 5 to 7 and arduino/setup-task from 2 to 3. See #​189 and #​190.

📚 Documentation

• Migration Guide Typos: Two typos corrected in the migration from Sprig guide. See PR #​192.

---

📝 Notes

Templates are a drop-in replacement for v1.1.0, with one visible change: div now errors on a zero divisor instead of returning an arbitrary value. Go callers of CryptoRegistry.DerivePassword must note its counter parameter changed from uint32 to int.

Full Changelog: go-sprout/sprout@v1.1.0...v1.1.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=14 days

Details:

Package	Change
go.yaml.in/yaml/v3	v3.0.4 -> v3.0.5

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 34.49%. Comparing base (83fedad) to head (aa577ff).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2122      +/-   ##
==========================================
- Coverage   34.51%   34.49%   -0.03%     
==========================================
  Files         419      419              
  Lines       27718    27718              
==========================================
- Hits         9567     9561       -6     
- Misses      17435    17438       +3     
- Partials      716      719       +3     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.