[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/aws/aws-sdk-go-v2/config	v1.33.12 → v1.33.13			indirect	patch
github.com/aws/aws-sdk-go-v2/credentials	v1.20.12 → v1.20.13			indirect	patch
github.com/aws/aws-sdk-go-v2/service/signin	v1.12.0 → v1.12.1			indirect	patch
github.com/aws/aws-sdk-go-v2/service/sso	v1.39.0 → v1.39.1			indirect	patch
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.44.0 → v1.44.1			indirect	patch
github.com/go-jose/go-jose/v4	v4.1.6 → v4.1.8			indirect	patch
github.com/klauspost/cpuid/v2	v2.4.1 → v2.4.2			indirect	patch
go.yaml.in/yaml/v3	v3.0.5 → v3.0.6			require	patch
mvdan.cc/sh/x	e96ef1d → 167b267			require	digest
netlify-cli	27.16.1 → 27.16.2			devDependencies	patch
shiki (source)	4.5.0 → 4.6.0			devDependencies	minor

---

Release Notes

go-jose/go-jose (github.com/go-jose/go-jose/v4)

v4.1.8

Compare Source

Added

• ML-DSA support by @​james-d-elliott in #​282 🎉

v4.1.7

Compare Source

Fixed Security Issues

• Thumbprint: reject invalid RSA key (#​317) - GHSA-r39w-98wm-9pp6
• json: backport stdlib fix for embedded unexported field (#​318) - GHSA-27pc-rm86-68pq
• Detect if headers are set by presence in the map (#​319) - GHSA-p9j4-2j95-j4rv
• limit RSA size in certificate verify (#​315) - GHSA-v6h2-qj3f-2h6v
• Limit recipients and signatures in JWE/JWS (#​316) - GHSA-c67m-wr4h-2ccg

Fixed

• jwk: fix bug in x5c parsing (#​311)
• reject base64-encoded "null" in protected headers (#​309)

Deprecated

• deprecate ParseEncrypted / ParseSigned (#​222)

klauspost/cpuid (github.com/klauspost/cpuid/v2)

v2.4.2

Compare Source

What's Changed

• fix: test ECX bits 26/27 for XSAVE and OSXSAVE by @​TastyHeadphones in #​185

New Contributors

• @​TastyHeadphones made their first contribution in #​185

Full Changelog: klauspost/cpuid@v2.4.1...v2.4.2

yaml/go-yaml (go.yaml.in/yaml/v3)

v3.0.6

Compare Source

netlify/cli (netlify-cli)

v27.16.2

Compare Source

Bug Fixes

• pagination for logs (#​9342) (94ee316)

shikijs/shiki (shiki)

v4.6.0

Compare Source

   🐞 Bug Fixes

• primitive: Apply injections loaded after their target grammar  -  by @​Yahiro025 in #​1333 (28817)
• rehype: Avoid cache key collisions between code blocks  -  by @​Don-Yin in #​1343 (f8f63)
• stream: Align ShikiStreamTokenizer offsets and CRLF handling with codeToTokens  -  by @​xyrolle in #​1335 (f8aba)
• transformers: Also convert single-theme inline token styles to classes  -  by @​harsh-thakkar7 in #​1344 (6319e)
• vitepress-twoslash: Keep drag guard working with floating-vue 5.4  -  by @​0froq in #​1340 (5a174)

   🏎 Performance

• core: Render many decorations in linear time  -  by @​DaniPopes in #​1338 (f07d3)
• engine-oniguruma: Compress Wasm binary with gzip and load asynchronously  -  by @​jeremy-code in #​1331 (a1fea)

    View changes on GitHub

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.