Bump github.com/sethvargo/go-password from 0.3.1 to 0.4.0

[dependabot]

Bumps github.com/sethvargo/go-password from 0.3.1 to 0.4.0.

Release notes

Sourced from github.com/sethvargo/go-password's releases.

v0.4.0

What's changed

Modernizes the library for Go 1.25.

Breaking / behavior changes

• Requires Go 1.25 (dropped the pinned toolchain).
• Generate now returns the new exported ErrNegativeInput when numDigits or numSymbols is negative. Previously Generate(10, -3, 0, false, false) computed chars = 10 - (-3) - 0 = 13 and silently returned a 13-character password instead of the requested length.

Fixes

• Fixed the broken README Actions badge (deprecated shields.io endpoint), the dead godoc.org link, and the dead AgileBits discussion link.
• Fixed a non-constant format string (log.Printf(res) -> log.Print(res)) in the package doc comment and README.

Tooling

• Replaced golangci-lint with a make test CI job across macOS/Ubuntu/Windows, with actions SHA-pinned via ratchet.

Full changelog: sethvargo/go-password@v0.3.1...v0.4.0

Commits

• 4be2e3d Modernize for Go 1.25 (#31)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)