fix(deps): update module github.com/spf13/afero to v1.15.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/spf13/afero	v1.14.0 -> v1.15.0

---

Release Notes

spf13/afero (github.com/spf13/afero)

v1.15.0

Compare Source

What's Changed

• Bump golangci/golangci-lint-action from 6.5.1 to 6.5.2 by @​dependabot[bot] in #​479
• Lint by @​sagikazarmark in #​492
• build(deps): bump github/codeql-action from 2.13.4 to 3.28.15 by @​dependabot[bot] in #​494
• build(deps): bump actions/dependency-review-action from 4.5.0 to 4.6.0 by @​dependabot[bot] in #​493
• Bump actions/setup-go from 5.3.0 to 5.4.0 by @​dependabot[bot] in #​480
• build(deps): bump github/codeql-action from 3.28.15 to 3.28.16 by @​dependabot[bot] in #​496
• support aliyun oss storage with third-party link by @​messikiller in #​491
• build(deps): bump github/codeql-action from 3.28.16 to 3.28.17 by @​dependabot[bot] in #​497
• chore: update x/test by @​sagikazarmark in #​502
• build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 by @​dependabot[bot] in #​503
• build(deps): bump actions/dependency-review-action from 4.6.0 to 4.7.1 by @​dependabot[bot] in #​505
• build(deps): bump github/codeql-action from 3.28.17 to 3.28.18 by @​dependabot[bot] in #​506
• fix(gcsfs): update object not exist check logic by @​ahkui in #​485
• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @​dependabot[bot] in #​508
• build(deps): bump github/codeql-action from 3.28.18 to 3.29.4 by @​dependabot[bot] in #​519
• build(deps): bump github/codeql-action from 3.29.4 to 3.29.7 by @​dependabot[bot] in #​524
• build(deps): bump github/codeql-action from 3.29.7 to 3.30.1 by @​dependabot[bot] in #​537
• build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 by @​dependabot[bot] in #​536
• build(deps): bump actions/dependency-review-action from 4.7.1 to 4.7.3 by @​dependabot[bot] in #​533
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​527
• chore: update deps by @​sagikazarmark in #​538
• fix: spelling errors (excpected -> expected, iself -> itself) by @​MarkRosemaker in #​523

New Contributors

• @​messikiller made their first contribution in #​491
• @​ahkui made their first contribution in #​485
• @​MarkRosemaker made their first contribution in #​523

Full Changelog: spf13/afero@v1.14.0...v1.15.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
golang.org/x/text	v0.23.0 -> v0.28.0

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 86.71%. Comparing base (fa6e9b3) to head (3c9a9d1).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #576   +/-   ##
=======================================
  Coverage   86.71%   86.71%           
=======================================
  Files          12       12           
  Lines        2364     2364           
=======================================
  Hits         2050     2050           
  Misses        238      238           
  Partials       76       76           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[claude]

Code Review: Afero v1.15.0 Dependency Update

✅ Overall Assessment: APPROVED

This is a clean dependency update that follows good practices for automated dependency management.

---

Code Quality & Best Practices

• Excellent: Automated dependency update using Renovate follows industry standards
• Good: Semantic versioning compliance (v1.14.0 → v1.15.0 is a minor version bump)
• Positive: Automerge is appropriately configured for low-risk dependency updates

Potential Issues

• Low Risk: The afero v1.15.0 release includes mostly maintenance updates and bug fixes
• Notable Changes:
  • GCS filesystem improvements (fix(gcsfs): update object not exist check logic)
  • Aliyun OSS storage support addition
  • Various dependency updates and linting improvements
• Indirect Dependency: golang.org/x/text updated from v0.23.0 to v0.28.0 (transitive)

Performance Considerations

• Neutral: No performance-impacting changes identified in the afero v1.15.0 release
• Minor Improvement: GCS filesystem logic improvements may enhance error handling efficiency

Security Concerns

• Low Risk: No security vulnerabilities addressed in this version
• Good: Regular dependency updates reduce exposure to potential future vulnerabilities
• Positive: Renovate automation ensures timely security updates

Test Coverage

• Recommendation: Since this library heavily relies on afero for filesystem abstraction (as noted in CLAUDE.md), consider running the full test suite
• Architecture Note: The test suite uses afero.NewBasePathFs for mock filesystem operations, making this dependency critical for testing

Compliance with Repository Standards

• Meets CLAUDE.md Requirements:
  • Maintains afero as core dependency for ClientDriver filesystem operations
  • No architectural changes that would affect the driver pattern
  • Aligns with "No global state" and "Interface-based design" principles

---

Recommendation

✅ APPROVE and MERGE - This is a safe, beneficial dependency update with minimal risk and potential improvements to filesystem handling.

The automated testing pipeline should validate compatibility, but given afero's commitment to backward compatibility and the minor version nature of this update, no breaking changes are expected.