Update module golift.io/xtractr to v0.5.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
golift.io/xtractr	v0.4.2 → v0.5.0

---

Release Notes

golift/xtractr (golift.io/xtractr)

v0.5.0

Compare Source

New feature: Fail extractions that exceed a maximum decompression size, file count or extraction ratio.
New feature: Files that could not be copied to their final destination are returned to callers. Previously "ignored."
New feature: When an extracted file cannot be moved to its final location (e.g. cross-device), it is copied to a temporary location in the same folder, then moved. In other words, it's not longer "copied" to its final destination when it's avoidable.
Also: More bug fixes and symlink-follow protections.

What's Changed

• Honor Close errors and verify 7z CRC32 by @​davidnewhall in #​171
• Stop building a dummy Config to borrow MoveFiles by @​davidnewhall in #​172
• Update module github.com/stretchr/testify to v1.12.0 by @​renovate[bot] in #​173
• Do not follow planted symlinks when writing extracted files by @​davidnewhall in #​175
• Report refused files by @​davidnewhall in #​177
• Abort extracts that exceed MaxBytes, MaxFiles, or MaxRatio by @​davidnewhall in #​176
• Update module github.com/stretchr/testify to v1.12.1 by @​renovate[bot] in #​180
• Copy to tmp name cross-device by @​davidnewhall in #​178

Full Changelog: golift/xtractr@v0.4.2...v0.5.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.