chore(deps): update dependency copier to v9.18.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
copier	9.15.2 → 9.18.2

---

Release Notes

copier-org/copier (copier)

v9.18.2

Compare Source

Fix

• allow overwriting destination symlinks when preserve_symlinks: false
• cache: resolve submodules from the current checkout's .gitmodules (#​2767)

Security

• prevent trust bypass via ambiguous URL characters

  To prevent URL confusion attacks, trusted prefix matching is now restricted to
  repository URL paths containing only RFC 3986 §2.3 "unreserved" characters
  (letters, digits, -, ., _, ~) and /. URL paths containing other
  characters now require an exact, verbatim match.

v9.18.1

Compare Source

Fix

• disambiguate Windows paths from SCP URLs in trust check

v9.18.0

Compare Source

Feat

• exclude: add support for multiple exclude patterns in a single entry (#​2804)

Fix

• preserve the original error when cleanup fails (#​2824)

Security

• prevent trust bypass via encoded URL traversal for alias and SCP-style URLs

v9.17.2

Compare Source

Security

• disallow Jinja {% include %} of symlinks resolving outside template root
• disallow config !include paths outside the template root

Refactor

• updating: delete user-removed files after rendering instead of excluding them

v9.17.1

Compare Source

Security

• prevent code execution via Jinja finalizer by disallowing YAML tags
• prevent code execution via Jinja sandbox escape through path and settings objects

v9.17.0

Compare Source

Feat

• add --ask flag to force prompting of selected questions (#​2705)

Security

• prevent trust bypass via encoded URL traversal

v9.16.0

Compare Source

Feat

• cache remote git templates as local mirrors with worktrees (#​2720)

Fix

• updating: preserve and update template-managed gitignored files (#​2730)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.