Update all non-major dependencies (release/v3.x)

[renovate-rancher]

This PR contains the following updates:

Package	Type	Update	Change
go (source)	toolchain	patch	1.23.4 -> 1.23.12
rancher/kuberlr-kubectl		patch	v4.0.2 -> v4.0.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[renovate-rancher]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 20 additional dependencies were updated

Details:

Package	Change
github.com/Masterminds/semver/v3	v3.2.1 -> v3.3.0
github.com/cyphar/filepath-securejoin	v0.2.4 -> v0.3.6
github.com/evanphx/json-patch	v5.9.0+incompatible -> v5.9.11+incompatible
github.com/fsnotify/fsnotify	v1.7.0 -> v1.8.0
github.com/google/go-cmp	v0.6.0 -> v0.7.0
github.com/google/pprof	v0.0.0-20241210010833-40e02aabc2ad -> v0.0.0-20250403155104-27863c87afa6
github.com/jmoiron/sqlx	v1.3.5 -> v1.4.0
github.com/rubenv/sql-migrate	v1.5.2 -> v1.7.1
github.com/spf13/afero	v1.6.0 -> v1.12.0
github.com/spf13/cast	v1.5.0 -> v1.7.1
github.com/spf13/pflag	v1.0.5 -> v1.0.6
github.com/subosito/gotenv	v1.2.0 -> v1.6.0
golang.org/x/net	v0.33.0 -> v0.37.0
golang.org/x/oauth2	v0.24.0 -> v0.25.0
golang.org/x/sync	v0.10.0 -> v0.14.0
golang.org/x/sys	v0.28.0 -> v0.32.0
golang.org/x/term	v0.27.0 -> v0.30.0
golang.org/x/tools	v0.28.0 -> v0.31.0
google.golang.org/protobuf	v1.36.1 -> v1.36.5
k8s.io/gengo	v0.0.0-20240911193312-2b36238f13e9 -> v0.0.0-20250130153323-76c5745d3511