fix(deps): update patch updates

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
codeberg.org/chavacava/garif	v0.2.0 → v0.2.1			indirect	patch
github.com/aws/aws-sdk-go-v2	v1.41.2 → v1.41.3			require	patch
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	v1.7.5 → v1.7.6			indirect	patch
github.com/aws/aws-sdk-go-v2/config	v1.32.10 → v1.32.11			require	patch
github.com/aws/aws-sdk-go-v2/credentials	v1.19.10 → v1.19.11			indirect	patch
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	v1.18.18 → v1.18.19			indirect	patch
github.com/aws/aws-sdk-go-v2/internal/configsources	v1.4.18 → v1.4.19			indirect	patch
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	v2.7.18 → v2.7.19			indirect	patch
github.com/aws/aws-sdk-go-v2/internal/ini	v1.8.4 → v1.8.5			indirect	patch
github.com/aws/aws-sdk-go-v2/internal/v4a	v1.4.18 → v1.4.20			indirect	patch
github.com/aws/aws-sdk-go-v2/service/ecs	v1.73.0 → v1.73.1			require	patch
github.com/aws/aws-sdk-go-v2/service/iam	v1.53.3 → v1.53.4			require	patch
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	v1.13.5 → v1.13.6			indirect	patch
github.com/aws/aws-sdk-go-v2/service/internal/checksum	v1.9.10 → v1.9.11			indirect	patch
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	v1.13.18 → v1.13.19			indirect	patch
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	v1.19.18 → v1.19.19			indirect	patch
github.com/aws/aws-sdk-go-v2/service/pricing	v1.40.12 → v1.40.13			indirect	patch
github.com/aws/aws-sdk-go-v2/service/s3	v1.96.2 → v1.96.4			require	patch
github.com/aws/aws-sdk-go-v2/service/signin	v1.0.6 → v1.0.7			indirect	patch
github.com/aws/aws-sdk-go-v2/service/sso	v1.30.11 → v1.30.12			indirect	patch
github.com/aws/aws-sdk-go-v2/service/ssooidc	v1.35.15 → v1.35.16			indirect	patch
github.com/aws/aws-sdk-go-v2/service/sts	v1.41.7 → v1.41.8			require	patch
github.com/klauspost/compress	v1.18.0 → v1.18.4			indirect	patch
github.com/mattn/go-runewidth	v0.0.20 → v0.0.21			indirect	patch
github.com/pulumi/pulumi-command/sdk	v1.2.0 → v1.2.1			require	patch
google.golang.org/grpc	v1.79.1 → v1.79.2			indirect	patch
pulumi/pulumi-command	v1.2.0 → v1.2.1				patch
sigs.k8s.io/structured-merge-diff/v6	v6.3.0 → v6.3.2			indirect	patch

---

Release Notes

chavacava/garif (codeberg.org/chavacava/garif)

v0.2.1

Compare Source

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

v1.41.3

Compare Source

klauspost/compress (github.com/klauspost/compress)

v1.18.4

Compare Source

What's Changed

• gzhttp: Add zstandard to server handler wrapper by @​klauspost in #​1121
• zstd: Add ResetWithOptions to encoder/decoder by @​klauspost in #​1122
• gzhttp: preserve qvalue when extra parameters follow in Accept-Encoding by @​analytically in #​1116

New Contributors

• @​analytically made their first contribution in #​1116
• @​ethaizone made their first contribution in #​1124
• @​zwass made their first contribution in #​1125

Full Changelog: klauspost/compress@v1.18.2...v1.18.4

v1.18.3

Compare Source

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: klauspost/compress@v1.18.2...v1.18.3

v1.18.2

Compare Source

What's Changed

• flate: Fix invalid encoding on level 9 with single value input by @​klauspost in #​1115
• flate: reduce stateless allocations by @​RXamzin in #​1106
• build(deps): bump github/codeql-action from 3.30.5 to 4.31.2 in the github-actions group by @​dependabot[bot] in #​1111

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

New Contributors

• @​RXamzin made their first contribution in #​1106

Full Changelog: klauspost/compress@v1.18.1...v1.18.2

v1.18.1

Compare Source

What's Changed

• zstd: Fix incorrect buffer size in dictionary encodes by @​klauspost in #​1059
• s2: check for cap, not len of buffer in EncodeBetter/Best by @​vdarulis in #​1080
• zstd: Add simple zstd EncodeTo/DecodeTo functions by @​klauspost in #​1079
• zlib: Avoiding extra allocation in zlib.reader.Reset by @​travelpolicy in #​1086
• gzhttp: remove redundant err check in zstdReader by @​ryanfowler in #​1090
• Run modernize. Deprecate Go 1.22 by @​klauspost in #​1095
• flate: Simplify matchlen by @​klauspost in #​1101
• flate: Add examples by @​klauspost in #​1102
• flate: Use exact sizes for huffman tables by @​klauspost in #​1103
• flate: Faster load+store by @​klauspost in #​1104
• Add notice to S2 about MinLZ by @​klauspost in #​1065

New Contributors

• @​wooffie made their first contribution in #​1069
• @​vdarulis made their first contribution in #​1080
• @​travelpolicy made their first contribution in #​1086
• @​ryanfowler made their first contribution in #​1090

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

mattn/go-runewidth (github.com/mattn/go-runewidth)

v0.0.21

Compare Source

pulumi/pulumi-command (github.com/pulumi/pulumi-command/sdk)

v1.2.1

Compare Source

grpc/grpc-go (google.golang.org/grpc)

v1.79.2: Release 1.79.2

Compare Source

Bug Fixes

• stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (#​8874)

kubernetes-sigs/structured-merge-diff (sigs.k8s.io/structured-merge-diff/v6)

v6.3.2

Compare Source

v6.3.1

Compare Source

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[adrianriobo]

LGTM