fix(security): CVE-2026-27143 in git-credential-oauth 0.17.2-r3 (#69859)

* fix(security): CVE-2026-27143 in git-credential-oauth

* fix: git-credential-oauth test failure - capture output before grep

The test `git-credential-oauth -verbose 2>&1 | grep 0.17.2` was failing
because `git-credential-oauth -verbose` exits with status 2 when run
without a git credentials context (no git operation in progress).

With `set -eo pipefail`, the pipe fails even though the binary does
print the version string and grep would succeed.

Fix by capturing the output first with command substitution and `|| true`
to suppress the non-zero exit, then grep the captured output:

  output=$(git-credential-oauth -verbose 2>&1 || true)
  echo "$output" | grep ${{package.version}}

---------

Co-authored-by: cve-remediation <cve-remediation@chainguard.dev>

Export:  25954bd531261911aa204a6049d6933f5fc1d734

Author: octo-sts-7[bot]

git-credential-oauth.yaml

@@ -1,7 +1,7 @@
 package:
   name: git-credential-oauth
   version: "0.17.2"
-  epoch: 3
+  epoch: 4 # CVE-2026-27143
   description: "A Git credential helper that securely authenticates to GitHub, GitLab and BitBucket using OAuth"
   copyright:
     - license: Apache-2.0
@@ -36,7 +36,8 @@ update:
 test:
   pipeline:
     - runs: |
-        git-credential-oauth -verbose 2>&1 | grep ${{package.version}}
+        output=$(git-credential-oauth -verbose 2>&1 || true)
+        echo "$output" | grep ${{package.version}}
 
 environment:
   contents: