Summary

Bump github.com/jenkins-x/go-scm from v1.15.16 to v1.15.17 to pick up fixes for Bitbucket Server/DC group-based permission checks in IsMember() and IsCollaborator().

What's fixed upstream

jenkins-x/go-scm#522 (merged via jenkins-x/go-scm#523):

1. URL-encode group names — groups with spaces (e.g. my group) produced malformed URLs, causing requests to fail
2. Continue group scan on lookup errors — a single failing group lookup no longer aborts the entire authorization check
3. IsCollaborator() checks repo-level group permissions — previously only checked direct user permissions, missing group-inherited access entirely

Impact

Users with valid Bitbucket DC repository access through project or repo groups can now trigger CI builds without needing to be individually added to permissions. This partially addresses #2468.

Related

• Bitbucket Data Center: PAC Service Account User must be a Licensed User #2468 — PAC service account must be a licensed user
• Bitbucket DC: Use permissions/search Endpoint to support Unlicensed Service Accounts and Improve Auth Efficiency #2470 — Use permissions/search endpoint (future improvement)
• jenkins-x/go-scm#522
• jenkins-x/go-scm#523