chore(deps): bump the go-dependencies group across 1 directory with 6 updates

[dependabot]

Bumps the go-dependencies group with 5 updates in the / directory:

Package	From	To
github.com/mattn/go-isatty	0.0.22	0.0.23
github.com/thlib/go-timezone-local	0.0.7	0.0.8
golang.org/x/image	0.39.0	0.44.0
golang.org/x/sys	0.44.0	0.47.0
golang.org/x/term	0.42.0	0.45.0

Updates github.com/mattn/go-isatty from 0.0.22 to 0.0.23

Commits

• 4bc9b75 Lower go directive to 1.20 for Windows 7 users (#94)
• 4e061da add stub for haiku os (#93)
• See full diff in compare view

Updates github.com/thlib/go-timezone-local from 0.0.7 to 0.0.8

Release notes

Sourced from github.com/thlib/go-timezone-local's releases.

v0.0.8 — More reliable local time-zone detection

This release improves time-zone detection across Windows and Unix systems, while making the Windows mapping generator safer and easier to maintain.

Highlights

• Windows now uses the native GetDynamicTimeZoneInformation API first, avoiding a subprocess during normal detection and improving handling when automatic daylight-saving adjustments are disabled.
• The tzutil fallback no longer causes a console window to flash in GUI and detached applications ([#15](thlib/go-timezone-local#15), thanks [@​williammartin](https://github.com/williammartin)).
• Unix detection now handles relative /etc/localtime targets and symlinked parent directories more reliably. Time-zone extraction from zoneinfo paths was also simplified ([#17](thlib/go-timezone-local#17), thanks [@​dolmen](https://github.com/dolmen)).
• TZ environment values with the optional POSIX : prefix, such as :Europe/Tallinn, are now recognized correctly.
• Added a runnable example demonstrating detection and loading of the resulting IANA time zone.

Mapping generator improvements

• Replaced the legacy IANA FTP downloader with HTTPS.
• Added download timeouts, response-size limits, HTTP status checks, and input validation.
• Improved archive extraction errors and generated-code formatting.
• Refreshed the Windows-to-IANA mapping and removed an invalid empty mapping.
• Live network tests are now opt-in through TZLOCAL_LIVE_TESTS=1.

Compatibility note

The public tzlocal API is unchanged. The exported tzdata.FTPDownload helper was removed; this only affects programs importing that generator-oriented helper directly.

Contributors

Special thanks to first-time contributors [@​williammartin](https://github.com/williammartin) and [@​dolmen](https://github.com/dolmen).

Full changelog: thlib/go-timezone-local@v0.0.7...v0.0.8

Commits

• 8b96dda Harden timezone mapping updates
• 97ff164 update tzmapping readme
• dfc6ef6 use GetDynamicTimeZoneInformation and add example
• 2a811fc apply suggested optimization
• 2993d6e Merge pull request #17 from dolmen-go/unix-simplify-inferFromPath
• 11de6d6 Merge pull request #15 from williammartin/fix/suppress-tzutil-console-window
• fd84b47 unix: simplify inferFromPath
• f4b1b0c fix: set CREATE_NO_WINDOW on tzutil exec to prevent console flash
• 9af4692 Update README.md
• See full diff in compare view

Updates golang.org/x/image from 0.39.0 to 0.44.0

Commits

• 891abcb go.mod: update golang.org/x dependencies
• f50490d font: document (lack of) security hardening in font packages
• 7a0cfda webp: check for VP8L dimension mismatch before allocation
• 4339315 tiff: consistently skip horizontal padding in tiled images
• b5baf41 tiff: avoid overflow when reading IFD entries
• e7513b5 tiff: limit the amount of data read in IFD entries
• cb9f1a6 tiff: limit uncompressed data reads
• 304d4cc tiff: reject tiles too much larger than the image
• 7c04344 tiff: add buffer slice overflow checks for 32-bit systems
• c5511df webp: require that VP8/VP8L dimensions match canvas dimensions
• Additional commits viewable in compare view

Updates golang.org/x/sys from 0.44.0 to 0.47.0

Commits

• 9e7e939 cpu: handle vendor suffixes in parseRelease
• f6fb8a1 unix: use epoll_pwait rather than epoll_wait
• f3eeabf windows: avoid length overflow in NewNTString
• 3cb6647 unix: update glibc to 2.43
• c507910 windows: document safe usage of TrusteeValue
• d58dcfa unix: add GPIO constants and structs
• 397d5f8 unix: update to Linux kernel 7.0
• 0a387f7 cpu: detect zbc extension on riscv64
• 758f71c cpu: add LLACQ_SCREL, SCQ, DBAR_HINTS detection for loong64
• 99666ae unix: merge Linux readv/writev implementation with Darwin/OpenBSD
• Additional commits viewable in compare view

Updates golang.org/x/term from 0.42.0 to 0.45.0

Commits

• 9f69229 go.mod: update golang.org/x dependencies
• 3b43943 go.mod: update golang.org/x dependencies
• 3c3e485 go.mod: update golang.org/x dependencies
• See full diff in compare view

Updates golang.org/x/text from 0.36.0 to 0.40.0

Commits

• 724af9c go.mod: update golang.org/x dependencies
• bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
• b326f3d go.mod: update golang.org/x dependencies
• 5ae8e57 unicode/norm: avoid infinite loop on invalid input
• 0dc94a2 all: fix some comments
• f4bb632 go.mod: update golang.org/x dependencies
• 3ef517e go.mod: update golang.org/x dependencies
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.