chore(deps): update dependency tianon/gosu to v1.19

[renovate]

This PR contains the following updates:

Package	Update	Change
tianon/gosu	minor	1.17 → 1.19

---

Release Notes

tianon/gosu (tianon/gosu)

v1.19

Compare Source

• built on Go 1.24.6, github.com/moby/sys/user 0.1.0, golang.org/x/sys(/unix) 0.1.0;
  see SECURITY.md for CVE/security advice

• update for https://pkg.go.dev/vuln/GO-2025-3956 (#​163)

  I don't think this is a critical issue with gosu (as it requires a misconfigured environment and we only invoke LookPath after we've dropped from root), but one worth updating for.

full changelog: tianon/gosu@1.18...1.19

4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4

See INSTALL.md for (example) installation instructions.

v1.18

Compare Source

• built on Go 1.24.0, github.com/moby/sys/user 0.1.0, golang.org/x/sys(/unix) 0.1.0;
  see SECURITY.md for CVE/security advice

• add -trimpath for cleaner binaries (#​137)

• remove explicit use of text/template, fmt, log, path/filepath, strings, and io for smaller binaries / package import tree (#​138, #​139, ccc5c46)

• use https://github.com/tianon/fake-git to embed version numbers in release binaries (#​155)

full changelog: tianon/gosu@1.17...1.18

4096R / B42F 6819 007F 00F8 8E36 4FD4 036A 9C25 BF35 7DD4

See INSTALL.md for (example) installation instructions.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.