Bump mvdan/sh from 3.9.0 to 3.10.0 in lib/tools/shellfmt.sh

[github-actions]

Bump mvdan/sh from 3.9.0 to 3.10.0 by bumping SHELLFMT_VERSION in lib/tools/shellfmt.sh.

Release notes

Sourced from mvdan/sh's releases.
Please note that this only shows the release notes for the latest release.

• cmd/shfmt
  • Report the correct language variant in parser error messages - shfmt still complains that " &> redirects are a bash/mksh feature" although it parses the script as bash mvdan/sh#1102
  • Move --filename out of the parser options category - man page: incorrect statement regarding use of - (read from stdin) and --filename flag mvdan/sh#1079
• syntax
  • Parse all CRLF line endings as LF, including inside heredocs - shfmt incorrectly reports "unclosed here-document" for tab-indented closing delimiter with <<- mvdan/sh#1088
  • Count skipped backslashes inside backticks in position column numbers - Panic in parser found by fuzzing mvdan/sh#1098
  • Count skipped null bytes in position column numbers for consistency
• interp
  • Fix a regression in v3.9.0 which broke redirecting files to stdin - interp: reading from file redirection in while loops waits indefinitely mvdan/sh#1099
  • Fix a regression in v3.9.0 where HandlerContext.Stdin was never nil
  • Add an Interactive option to be used by interactive shells - shell buitins have no effect when running an interactive parser with a custom readline implementation mvdan/sh#1100
  • Support closing stdin, stdout, and stderr via redirections like <&-

Consider becoming a sponsor if you benefit from the work that went into this release!

Binaries built on go version go1.23.2 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s -X=main.version=v3.10.0"