chore(deps): update mvdan/sh to v3.9.0

[renovate[bot]]

This PR contains the following updates:

Package	Update	Change
mvdan/sh	minor	v3.8.0 -> v3.9.0

---

Release Notes

mvdan/sh (mvdan/sh)

v3.9.0

Compare Source

This release drops support for Go 1.21 and includes many fixes.

• cmd/shfmt
  • Switch the diff implementation to remove one dependency
• syntax
  • Protect against overflows in position offset integers
• interp
  • Use os.Pipe for stdin to prevent draining by subprocesses - #​1085
  • Support cancelling reads in builtins when stdin is a file - #​1066
  • Support the nocaseglob bash option - #​1073
  • Support the Bash 5.2 @k parameter expansion operator
  • Support the test -O and test -G operators on non-Windows - #​1080
  • Support the read -s builtin flag - #​1063
• expand
  • Add support for case insensitive globbing - #​1073
  • Don't panic when pattern words are nil - #​1076

A special thanks to @​theclapp for their contributors to this release!

Consider becoming a sponsor if you benefit from the work that went into this release!

Binaries built on go version go1.23.0 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s -X=main.version=v3.9.0"

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.