build(deps): bump git-shim to v1.5.0

[JamieMagee]

What are you trying to accomplish?

Update dependabot/git-shim from v1.4.0 to v1.5.0, the latest stable release. The updater still needs the shim at /home/dependabot/bin/git so existing Git commands continue to use its HTTPS rewriting.

Anything you want to highlight for special attention from reviewers?

The v1.5.0 release renamed both the archive and the executable. The Dockerfile now downloads git-shim-v1.5.0-linux-${TARGETARCH}.tar.gz, extracts git-shim, and renames it to git. This keeps the existing PATH behavior on amd64 and arm64.

How will you know you've accomplished your goal?

script/build bundler built the updater-core and Bundler images successfully. The Bundler image had 42 layers.

In the built image:

executable: /home/dependabot/bin/git
command -v git: /home/dependabot/bin/git
git version 2.55.0
The Gemfile's dependencies are satisfied

All required CI checks pass.

Checklist

• I have run the complete test suite to ensure all tests and linters pass.
• I have thoroughly tested my code changes to ensure they work as expected, including adding additional tests for new functionality.
• I have written clear and descriptive commit messages.
• I have provided a detailed description of the changes in the pull request, including the problem it addresses, how it fixes the problem, and any relevant details about the implementation.
• I have ensured that the code is well-documented and easy to understand.

[Copilot]

Copilot review overview

🟢 Approval recommended

The focused dependency update is validated and has no unresolved issues.

Review tier: Balanced
Findings: None

What changed in this PR

Updates git-shim from v1.4.0 to v1.5.0 while preserving Git PATH interception.

Changes:

• Downloads the renamed architecture-specific v1.5.0 archive.
• Installs the extracted shim as /home/dependabot/bin/git.

File	Description
Dockerfile.updater-core	Updates and installs git-shim v1.5.0.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.