[9.3](backport #6377) build(deps): bump github.com/elastic/go-ucfg from 0.8.8 to 0.9.0

[mergify]

Bumps github.com/elastic/go-ucfg from 0.8.8 to 0.9.0.

Release notes

Sourced from github.com/elastic/go-ucfg's releases.

v0.9.0

What's Changed

Added

• Add ability to skip validation with new NoValidate option. #213
• Add an option to escape paths with new PathEscape option. #210
• Add Unwrap to baseError for Go error unwrapping support. #218

Changed

• Update CI to Go 1.24/1.25 and latest GitHub Actions versions. #217, #220, #221
• Remove vendored dependencies in favor of Go modules. #217

Fixed

• Fix panic from custom string types. #219
• Fix reifyStruct to not use configured fields in inline unpacking. #216

Full Changelog: elastic/go-ucfg@v0.8.8...v0.9.0

Changelog

Sourced from github.com/elastic/go-ucfg's changelog.

[0.9.0]

Added

• Add ability to skip validation with new NoValidate option. #213
• Add an option to escape paths with new PathEscape option. #210
• Add Unwrap to baseError for Go error unwrapping support. #218

Changed

• Update CI to Go 1.24/1.25 and latest GitHub Actions versions. #217, #220, #221
• Remove vendored dependencies in favor of Go modules. #217

Fixed

• Fix panic from custom string types. #219
• Fix reifyStruct to not use configured fields in inline unpacking. #216

Commits

• 08e1dbb Update CHANGELOG.md for v0.9.0 release. (#223)
• 7ea6a4e Add CODEOWNERS file. (#222)
• 02dedf3 Bump the github-actions group across 2 directories with 3 updates (#221)
• 318a390 ci: use a new gh check to gather the build status (#220)
• aabe3d2 Update the github CI to latest go versions and action versions (#217)
• 07ad178 Update reifyStruct to not use configured fields in inline unpacking. (#216)
• 7ec4378 Add Unwrap to baseError. (#218)
• e543db8 Fix panic from custom string types (#219)
• 3686933 chore: Update NOTICE.txt 2026 (#214)
• 3520930 Add ability to disable validation (#213)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

This is an automatic backport of pull request #6377 done by [Mergify](https://mergify.com).