chore(deps)(deps): bump the patch-and-minor group across 1 directory with 6 updates

[dependabot]

Bumps the patch-and-minor group with 5 updates in the / directory:

Package	From	To
github.com/braheezy/shine-mp3	0.1.0	0.2.0
github.com/coreos/go-oidc/v3	3.20.0	3.21.0
github.com/go-webauthn/webauthn	0.17.4	0.18.0
github.com/mewkiz/flac	1.0.13	1.0.14
github.com/pion/webrtc/v4	4.2.16	4.2.19

Updates github.com/braheezy/shine-mp3 from 0.1.0 to 0.2.0

Commits

• 517c455 Merge pull request #13 from 1Vewton/remove-hard-encoding
• c09175d fix(hardcode): Fix the problem of hardcoded stride of 2
• d6f2409 Merge pull request #9 from braheezy/be-safe
• ee9b66d Remove unsafe pointer usage
• fe3219f Merge pull request #8 from braheezy/wasm-example
• e293454 Add wasm example
• 08bd843 Merge pull request #6 from braheezy/license
• 899ebe7 Change from MIT to GPL
• 907f58f Refactor lots of C-style code to Go-style
• ac21fbb Remove unsafe from layer3
• Additional commits viewable in compare view

Updates github.com/coreos/go-oidc/v3 from 3.20.0 to 3.21.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.21.0

What's Changed

• oidc: ignore JWKs with unsupported key types rather than failing by @​nicoske in coreos/go-oidc#499

New Contributors

• @​nicoske made their first contribution in coreos/go-oidc#499

Full Changelog: coreos/go-oidc@v3.20.0...v3.21.0

Commits

• c914bd3 oidc: ignore JWKs with unsupported key types rather than failing
• See full diff in compare view

Updates github.com/go-webauthn/webauthn from 0.17.4 to 0.18.0

Release notes

Sourced from github.com/go-webauthn/webauthn's releases.

v0.18.0

0.18.0 (2026-08-27)

This release is a fairly major milestone in the development of this library. It has quite a few breaking changes but has added support for most if not all of the extension requirements natively, and adds formal support for Post-Quantum Cryptography with support for ML-DSA-44, ML-DSA-65, and ML-DSA-87 when used with go 1.27.

Details on the migration requirements for this version can be found int https://github.com/go-webauthn/webauthn/blob/HEAD/MIGRATION.md as they are substantial between ths version and prior versions.

Bug Fixes

• metadata: align members with mds 3.1.1 and ctap 2.3 (#739) (397152c)
• metadata: consistent revocation policy and client timeouts (#740) (34d324b)
• metadata: handle certificate chains of any depth (#737) (309ea69)
• metadata: honour status report order and effective dates (#736) (8be5355)
• metadata: mds3 parsing conformance and cache integrity (#735) (8115143)
• metadata: prevent panic corrupt blob (#698) (c5fd013)
• metadata: report malformed status report urls (#738) (ed82f7c)
• protocol: allow any attestation eku (#728) (f4e33fc)
• protocol: androidkey missing authorization list member (#727) (9b02b19)
• protocol: androidkey union generated (#729) (3ed3e75)
• protocol: bind credential public key curve to its algorithm (#752) (314c2be)
• protocol: compound attestation sub-statement unmarshalling (#751) (a582ecf)
• protocol: compound returns incorrect type (#731) (025d897)
• protocol: credential public key match limited to ECDSA (#732) (b4df26e)
• protocol: harden credential response and options handling (#763) (de0ae6c)
• protocol: missing tpm steps (#725) (f9a63f9)
• protocol: opaque origin matching and validation (#758) (37f065a)
• protocol: possible panic conditions (#719) (0ea14e7)
• protocol: safetynet validation steps (#726) (e12f6e8)
• protocol: single signature encoding policy and canonical der (#744) (99bbbdb)
• webauthncbor: reject data trailing the first cbor item (#762) (0801b5d)
• webauthncose: validate okp key algorithm (#759) (98c528b)
• webauthn: deprecations and handle check (#745) (8619bb9)
• webauthn: include backup flag check in registration (#748) (26a4868)
• webauthn: only update uv flag (#746) (b39c822)
• webauthn: use session relying party id (#747) (ebb45e2)

Features

• metadata: update to r46 anchor (#780) (20f33e6)
• ml-dsa preference list and gated availability (#768) (db1e068)
• protocol: client capability enumeration (#765) (62f4489)
• protocol: compound sub-statement scope (#742) (34271da)
• protocol: current user details signal constructor (#766) (b6db923)
• protocol: ecdsa attestation signature encoding policy (#743) (29404e9), closes #710
• protocol: related origins well-known document (#753) (05d54dc)
• protocol: relying party attestation policy (#741) (3239ed0)

... (truncated)

Changelog

Sourced from github.com/go-webauthn/webauthn's changelog.

0.18.0 (2026-08-27)

This release is a fairly major milestone in the development of this library. It has quite a few breaking changes but has added support for most if not all of the extension requirements natively, and adds formal support for Post-Quantum Cryptography with support for ML-DSA-44, ML-DSA-65, and ML-DSA-87 when used with go 1.27.

Details on the migration requirements for this version can be found int [MIGRATION.md] as they are substantial between ths version and prior versions.

Bug Fixes

• metadata: align members with mds 3.1.1 and ctap 2.3 (#739) (397152c)
• metadata: consistent revocation policy and client timeouts (#740) (34d324b)
• metadata: handle certificate chains of any depth (#737) (309ea69)
• metadata: honour status report order and effective dates (#736) (8be5355)
• metadata: mds3 parsing conformance and cache integrity (#735) (8115143)
• metadata: prevent panic corrupt blob (#698) (c5fd013)
• metadata: report malformed status report urls (#738) (ed82f7c)
• protocol: allow any attestation eku (#728) (f4e33fc)
• protocol: androidkey missing authorization list member (#727) (9b02b19)
• protocol: androidkey union generated (#729) (3ed3e75)
• protocol: bind credential public key curve to its algorithm (#752) (314c2be)
• protocol: compound attestation sub-statement unmarshalling (#751) (a582ecf)
• protocol: compound returns incorrect type (#731) (025d897)
• protocol: credential public key match limited to ECDSA (#732) (b4df26e)
• protocol: harden credential response and options handling (#763) (de0ae6c)
• protocol: missing tpm steps (#725) (f9a63f9)
• protocol: opaque origin matching and validation (#758) (37f065a)
• protocol: possible panic conditions (#719) (0ea14e7)
• protocol: safetynet validation steps (#726) (e12f6e8)
• protocol: single signature encoding policy and canonical der (#744) (99bbbdb)
• webauthncbor: reject data trailing the first cbor item (#762) (0801b5d)
• webauthncose: validate okp key algorithm (#759) (98c528b)
• webauthn: deprecations and handle check (#745) (8619bb9)
• webauthn: include backup flag check in registration (#748) (26a4868)
• webauthn: only update uv flag (#746) (b39c822)
• webauthn: use session relying party id (#747) (ebb45e2)

Features

• metadata: update to r46 anchor (#780) (20f33e6)
• ml-dsa preference list and gated availability (#768) (db1e068)
• protocol: client capability enumeration (#765) (62f4489)
• protocol: compound sub-statement scope (#742) (34271da)
• protocol: current user details signal constructor (#766) (b6db923)
• protocol: ecdsa attestation signature encoding policy (#743) (29404e9), closes #710
• protocol: related origins well-known document (#753) (05d54dc)
• protocol: relying party attestation policy (#741) (3239ed0)
• typed extension inputs and outputs (#734) (0661c81)

... (truncated)

Commits

• 109da34 release: v0.18.0 (#782)
• 4977ba1 docs: breaking (#781)
• f8eb85e build(deps): update github/codeql-action action to v4.37.9 (#779)
• 20f33e6 feat(metadata): update to r46 anchor (#780)
• bca8ebd test: add fuzz tests (#777)
• 9b6dffd build(deps): update github/codeql-action action to v4.37.8 (#776)
• 2190797 build: update to go 1.27 (#775)
• 97b0d9f build(deps): update dependency go to v1.27.0 (#774)
• f815453 build(deps): update module github.com/stretchr/testify to v1.12.1 (#772)
• a456bad build(deps): update go toolchain directive to v1.27.0 (#773)
• Additional commits viewable in compare view

Updates github.com/mewkiz/flac from 1.0.13 to 1.0.14

Commits

• 67fc6a5 readme: add #81 PR to 1.0.14 release note
• 2ac98f9 meta: bound string-length allocation in metadata block bodies (#81)
• f26319f readme: add #77 PR to future 1.0.14 release note
• 2389dee testdata: add note about flac-test-files Git Submodule
• 7458959 increased limits to comply with own tests (#78)
• a420a1b fix allocation of very large blocks (#77)
• See full diff in compare view

Updates github.com/pion/webrtc/v4 from 4.2.16 to 4.2.19

Release notes

Sourced from github.com/pion/webrtc/v4's releases.

v4.2.19

Changelog

• 37a88bd2ed547954c5d35aad9371a3d90563ba24 Fix RTX repair reader panic on malformed packets
• 2ac66ee534e3ad138a28c3808938df4511a0382a Fix typo in StreamID comment: too -> to
• 3234944db18f66743cf0852274fd73d88cb02641 Update golang Docker tag to v1.27 (#3502)
• 4007b4353821b3b7488d9837c92484923b51df8e Update module github.com/stretchr/testify to v1.12.1 (#3501)
• 6231b35acaa32353e5f2ddfcf2e9c10b10f58af5 Update module github.com/pion/stun/v3 to v3.1.7 (#3500)
• e04f34fb64efb83ae1e2ecb5bf9806d8e3f333f6 Update module github.com/stretchr/testify to v1.12.0 (#3499)
• 0f364c61c11308fbedc4da2bb868f69504632d7d Update module github.com/pion/turn/v5 to v5.0.13 (#3496)
• 381746d5232cf71cab3f2068813683475f2dc696 Update module github.com/pion/srtp/v3 to v3.0.13 (#3488)

v4.2.18

Changelog

• a08347acf9d5353163d4db2ed597ab23ba358ce3 Update module github.com/pion/sctp to v1.11.1 (#3486)
• 98a969ee0f669bb3d812be0c29408323c875ea2f Avoid unused RTX repair readers
• 82ea9e78befba99cf6a6ff532e128ead6459380b Update module github.com/pion/ice/v4 to v4.4.0 (#3485)
• d4edf3209235f27f78def8739090cdc03ba9c4d7 Update CI configs to v0.12.6
• 4378773f0a00148cf985edcbfa56913f80ddcfc6 Send nil interceptor attributes on RTP writes (#3483)
• a21f980bc85305d749eea64af347fc55dd0ab8ef Update module github.com/pion/interceptor to v0.1.46 (#3480)

v4.2.17

Changelog

• 21f6d7ad2c5a4159b56f7eec877738c34b4d66d3 Update module github.com/pion/rtp to v1.10.4
• d9b2a24c395f82498c8b116ada77a25a528d1e2b Set the default MTU to 1191
• be58c65a85ea75ceb61ccc7a1aceb64d69adc7ab Update actions/setup-node action to v7
• a50e6853574235c8294896e90deeab0fd839df9f Update module github.com/pion/ice/v4 to v4.3.0 (#3474)
• ebba224bb07c241036cf9fd7f98b37c26a016f52 Fix late assert panic in TestInterceptorNack
• 8ddbe21d72c756a683edd71c7c662669619bc0c4 Expose ICE use-candidate priority setting (#3449)
• 6fbce156e0de9764f1ce46ac581c0469ec1d7a04 Update module github.com/pion/dtls/v3 to v3.1.5 (#3469)
• df4b786e8ccb39773e22847c5faaf40e2abba9bc Update module github.com/pion/rtp to v1.10.3 (#3465)
• 991f6d352a1b51a0238293ff237ba8668df8d952 Update module github.com/pion/rtcp to v1.2.17 (#3462)
• 6d4ca7483dd3d51796156157b9ec1d7d569b5434 Update module github.com/pion/turn/v5 to v5.0.12 (#3464)
• 6b653c9e62bfa519dc2913d86c37f29fee68cb80 Update actions/checkout action to v7
• 33562414be6c5f6e535d638dffba193ee9fd190e Add support for non-zero channel mapping

Commits

• 37a88bd Fix RTX repair reader panic on malformed packets
• 2ac66ee Fix typo in StreamID comment: too -> to
• 3234944 Update golang Docker tag to v1.27 (#3502)
• 4007b43 Update module github.com/stretchr/testify to v1.12.1 (#3501)
• 6231b35 Update module github.com/pion/stun/v3 to v3.1.7 (#3500)
• e04f34f Update module github.com/stretchr/testify to v1.12.0 (#3499)
• 0f364c6 Update module github.com/pion/turn/v5 to v5.0.13 (#3496)
• 381746d Update module github.com/pion/srtp/v3 to v3.0.13 (#3488)
• a08347a Update module github.com/pion/sctp to v1.11.1 (#3486)
• 98a969e Avoid unused RTX repair readers
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.54.0 to 0.55.0

Commits

• f44d03d go.mod: update golang.org/x dependencies
• 5ed4944 crypto/internal/poly1305: provide optimised assembly for riscv64
• b07833c ssh: return window credit for discarded extended data
• d701c51 acme: fix nil pointer dereference in pebble test error reporting
• 999d053 ssh: fix parsing of GSSAPI payloads offering multiple mechanisms
• 90f76b8 ssh: reject certificate signature keys before recursing
• b53964a ssh: permit empty but non-nil HostKeyAlgorithms, KeyExchanges, Ciphers, MACs
• 626e40f ssh: drain stderr on forwarded TCP and Unix channels
• 31914c6 x509roots/fallback: update bundle
• f2135b8 all: clean up minor issues found by staticcheck
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.