[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/kovidgoyal/imaging	v1.8.23 → v1.9.0
github.com/tdewolff/minify/v2	v2.24.21 → v2.24.22
github.com/yuin/goldmark/v2	v2.1.6 → v2.1.8
go.hacdias.com/indielib	v0.5.0 → v0.6.0
maunium.net/go/mautrix	v0.31.0 → v0.32.0

---

Release Notes

kovidgoyal/imaging (github.com/kovidgoyal/imaging)

v1.9.0

Compare Source

tdewolff/minify (github.com/tdewolff/minify/v2)

v2.24.22

Compare Source

• JS: fix timing bug or endless loop for some input, fixes #​1049 and tdewolff/parse#132

yuin/goldmark (github.com/yuin/goldmark/v2)

v2.1.8

Compare Source

• fix(parser): fixes #​613

v2.1.7

Compare Source

• fix(parser): fix the fast path for emphasis parsing to handle linkify prefixes correctly

hacdias/indielib (go.hacdias.com/indielib)

v0.6.0

Compare Source

Added

• IndieAuth: Server.ParseAuthorization now accepts a redirect_uri on a different host than the client_id if the client publishes it, via redirect_uris in the client metadata or via redirect_uri link relations.

Changed

• Upgraded dependencies to latest versions.
• Upgrades build to use minimum Go 1.27.

mautrix/go (maunium.net/go/mautrix)

v0.32.0

Compare Source

• Breaking change (bridgev2) Added portal parameter to the
  GetChatInfoChange method.
• (bridgev2) Removed deprecated SimpleRemoteEvent type.
• (event) Removed unstable MSC4284 types, as policy servers have been
  stabilized.
• (event) Removed unused Beeper gallery types.
• (bridgev2) Added support for disappearing message timers based on when the
  recipient reads the message.
• (bridgev2) Added fingerprint ID option for client HTTP requests.
• (bridgev2) Added optional flag to login user input fields.
• (bridgev2) Added body size limit for incoming provisioning API requests.
• (bridgev2) Added interface for media that can only be viewed for a certain
  amount of time and/or certain number of times.
• (bridgev2) Added interface for blocking/unblocking users on the remote
  network.
• (bridgev2) Added alternate pre-handle methods for events that allow
  cancelling the event.
• (appservice) Added support for h2c in the HTTP server.
• (appservice) Added support for global middleware in the HTTP server.
• (client) Added wrappers for MatrixRTC livekit token endpoints.
• (client) Added wrapper for report user endpoint.
• (client) Added support for reading the full own invite/knock event in sync
  added by MSC4319.
• (event) Added MSC4274 gallery types.
• (federation) Added cap for key fetch backoff.
• (federation) Added context parameters for cache to allow persistent caches.
• (federation) Added validation when getting OpenID user info so that callers
  don't need to remember to do it separately.
• (crypto) Added backoff for fetching device lists that fail repeatedly.
• (crypto) Added option to schedule Olm session unwedging manually instead of
  having it happen automatically in a goroutine.
• (crypto) Changed Megolm session sharing to reuse the previous attempt if
  sharing fails.
• (event) Updated unsigned relations struct to match reality.
• (event) Updated edit fallback to always be cut to a few dozen bytes.
• (client) Changed displayname and avatar updates getters to ignore
  M_NOT_FOUND errors, as the spec allows returning that instead of an empty
  object.
• (format) Changed short emphasis extension to have higher priority to allow
  combining it with the standard emphasis syntax.
• (mediaproxy) Changed network errors to return 502 instead of 404.
• (bridgev2) Changed login provisioning API to allow returning initial cookies
  to use when opening a webview.
• (bridgev2) Changed reaction sync to keep existing database entries if
  removing a reaction fails.
• (bridgev2) Fixed old client not being disconnected when an existing login
  is recreated.
• (bridgev2) Fixed avatar and topic set flags being flipped on save.
• (bridgev2) Fixed fake message MXID generation not being sufficiently unique.
• (bridgev2) Fixed various panics and missing recovers.
• (bridgev2) Fixed bridge state loop not stopping on bridge stop.
• (bridgev2) Fixed deadlock when overwriting existing portal.
• (bridgev2) Fixed bridgev2.RespError not being castable to
  mautrix.RespError using errors.As.
• (bridgev2) Fixed split portal migration leaving behind incorrect
  user_portal rows.
• (client) Fixed method used for get pushers endpoint.
• (client) Fixed OAuth token expiry times only being counted in monotonic
  time, which would stop when the system is suspended.
• (client) Fixed expired OAuth token not attempting refresh when making request.
• (crypto) Fixed JSON encoding using HTML escapes unnecessarily, which lead
  to events being bigger than necessary, especially if they had formatting.
• (federation) Fixed incorrect request path on SendInvite.
• (federation/pdu) Fixed top-level redacts being incorrectly protected from
  redaction.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/tdewolff/parse/v2	v2.8.18 -> v2.8.19
go.mau.fi/util	v0.10.1 -> v0.11.0