chore(deps): update module golang.org/x/sys to v0.49.0

[scality-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
golang.org/x/sys	v0.47.0 → v0.49.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

Dependency Bump Evaluation

Version change: v0.47.0 → v0.49.0 (minor, skipping v0.48.0)
Semver bump type: minor

Changes:

• golang.org/x/sys is the Go team's syscall wrapper package; minor bumps add new syscall definitions, constants for newer kernel versions, and bug fixes in platform-specific code
• 38 commits across 96 files between v0.47.0 and v0.49.0, maintained by the Go team at Google

Breaking changes: None. golang.org/x/sys minor versions are additive — new syscalls and constants are added, existing ones are never removed

Security concerns: None. This is a core Go team package with no supply chain risk. No CVEs or security advisories noted in this version range

Impact on codebase: The only usage is in agent/internal/cache/store.go, which imports golang.org/x/sys/unix for:

• unix.Flock() — file locking for temporary extraction directories
• unix.LOCK_EX, unix.LOCK_NB — lock mode constants
• unix.EWOULDBLOCK — error sentinel for non-blocking lock attempts

These are fundamental POSIX syscall wrappers confirmed present and unchanged in v0.49.0 documentation. No deprecated or removed APIs affect this codebase.

CI status: Checks still in progress at time of evaluation — verify CI is green before merging

Recommendation: SAFE TO MERGE (once CI passes)

Notes: Pure dependency version bump in go.mod and go.sum only. No vendored source changes. The used APIs (Flock, lock constants, EWOULDBLOCK) are among the most stable symbols in the package.

— Claude Code