chore: bump vendor/zoekt to include go-git/v5 5.18.0 (GHSA-3xc5-wrhm-f963)

msukkari · claude · msukkari · commit 6f5cf19560fa · 2026-04-20T22:32:27.000-07:00
Picks up sourcebot-dev/zoekt#11 which addresses Dependabot alert #16 (credential leak on cross-host redirect in go-git's smart-HTTP transport). Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
diff --git a/vendor/zoekt b/vendor/zoekt
@@ -1 +1 @@
-Subproject commit da9bf1a3c96b438268e2692c4b4fd7a3d341c2c9
+Subproject commit 63c6546c46acfc177ab4d0cf35ddff786655d5de
