0.16.8

Ignore github.com/go-git/go-git/v5 vulnerabilities

This package is only used by tooling and bumping to a fixed version
requires bumping the Go version.

Signed-off-by: Tom Pantelis <tompantelis@gmail.com>