chore(deps): bump the go-minor-patch group across 1 directory with 2 updates

[dependabot]

Bumps the go-minor-patch group with 2 updates in the / directory: github.com/a-h/templ and github.com/pdfcpu/pdfcpu.

Updates github.com/a-h/templ from 0.3.1020 to 0.3.1070

Release notes

Sourced from github.com/a-h/templ's releases.

v0.3.1070

Changelog

• edf2b02ae483d199a5dc17875428959d2175e35a chore(deps): bump DeterminateSystems/determinate-nix-action from 3.20.0 to 3.21.2 (#1423)
• 04abee5364c6fab2bde8c00d215fdcb630ad6a94 chore(deps): bump DeterminateSystems/determinate-nix-action from 3.21.2 to 3.21.5 (#1429)
• 7e1935b076d4e361d40fcfe632bcc62837e35c83 chore(deps): bump actions/checkout from 6.0.2 to 7.0.0 (#1417)
• 3500646a08051246cd29312bc8775312c046770f chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 (#1422)
• 2575493476725961dab5f554bb22a2bcae17993b chore(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 (#1399)
• 1ddec4e9c18e1883dc019a7f6d6812f9df4683ee chore(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 (#1426)
• a6baa06495a4a2a00fd65d9a35f1f9440e5d28cb chore(deps): bump ko-build/setup-ko from 0.9 to 0.10 (#1427)
• 14fa33df209e82a3920ca1054b40e1d9741304d4 chore(deps): bump nixbuild/nix-quick-install-action from 34 to 35 (#1418)
• 928fa20e2c59468c8a23c6b10f975cd1d8b51ff8 chore: bump Go version in dev flake from 1.25.6 to 1.25.9
• afd5d4f771bdf632fa8e30498224d2f75c5afd2c chore: bump deps
• 9a16fdd1d41bc90d977e5ef83550825f50b9879a chore: bump dev tooling dependencies
• e5d17907e087bfcc5fcf7f5c0e0208221c71c7f0 chore: bump docusaurus version
• 5bb04257b33a0ca3ab5a461d30423f29c6a447b9 chore: bump go deps
• 992ad3efaae14de9108732da766675475f334630 chore: bump gofiber in example
• e8952a21b4ff1d536e214c4f541a91d5fd3499c0 chore: bump npm deps
• c735c4bcfba0fdd510629f77381639f1c1c72c67 chore: bump version
• 145dca149653f1708fb4a72fa43984cdb44c7b03 chore: bump versions in examples
• a302b1a1ea834091eeb81c5c4992810064e6ab44 chore: fix linter warnings (#1425)
• 75b2f2ef22d165c86f17398019173976c02ed348 chore: switch to pinned github actions commits
• 07dfb6e0c7c47f56c6e8ed6601ecd65b18e210dc chore: update CI/CD pipleline
• e512269cb3e3896c14cecfba7717c80b4101ed88 chore: update github actions to latest versions
• d6182bca7dfaeaf1140748eea2b523459b853918 chore: upgrade npm deps
• 3eb1420ade2633ca1cef6b21205f0de97dbf29db feat(lsp): add experimental support for Go files (#1384)
• f8c98a42d9a5081b41224f260e2ff14108bb752e feat: add .templignore_fmt and .templignore_generate support
• 5b940560063e36faca687a33ab45fb47e9a81fa1 feat: add dependabot check to pin github workflow versions
• 2720f8eb30515e739fcd6f2d9fcf9a2f338dca5b feat: add prettier formatting to LSP (#1381)
• d6fde35e7eee4ad8e3d7a2cf3eeb6d7d7e6ddca1 feat: add ranges to DocType nodes (#1424)
• c0ab59e1e5e951dce2cdb7d1d274ea3c8eb9f437 feat: apply prettier to constant attribute values, closes #1263
• a42729f98e74f26fc0cd8c96cad3c92ac89386cd feat: notify gopls templ version, see #1376
• b757ca212259260a58223fec9f36fe6e86b638b1 feat: support Go comments within HTML tag attributes (#1251)
• 06f022cda52f1703b964e74af15e1a0e2d245ab2 feat: track element tag ranges (#1398)
• 3e1cc6845be7d868f84f0431c724a441fcdcc2a3 feat: update the -cmd flag on templ generate --watch to support shell commands
• 82a7b90efe4972cef488faa683c294f2580b55f7 fix: JavaScript function name validation (#1400)
• a4b4479011f3264383242735fbe085a67d953105 fix: add version and switch to flake output using pname (#1430)
• bec9b04ef4e1e8960c20e3ea0b232183425ba8cb fix: broken tests due to Go version upgrade
• f32707bfb19ffa1a566e0110d6b6c2165f8dc0a3 fix: ensure version cli tool has template
• 598b81e9f23df32055e42a5ea15bb04c37e56e6f fix: failure to parse large templ files (#1395)
• 965ce82ff651b1f53e273c4c70d8d61bdf98f58e fix: live reload should forward SIGINT/SIGTERM to child process groups - fixes #1323 (#1391)
• e2b1a743073a9b4785a9182058c32de4a8549ab0 fix: narrow ResolveAttributeValue to stringable | ComponentScript types (#1407)
• 47936f9e707195f026d413db07da6a9943679c7b fix: parse unquoted attributes on non-self-closing elements, fixes #1372
• 4dcddeda0c9ef97970324d246c781aea8250b29a fix: prevent data-templ-depth divs leaking into script content, fixes #1277
• 9be08d89915847149a1058a5ad6f28e5180e7123 fix: render templ component expressions within text ranges, fixes #693
• 205eb60cd3a519cd8d13988f78764fa1264189d2 fix: security recommendations by zizmor
• f8e3a1b4efb329e94e4831e3ad494bbc2086b756 fix: support map[templ.CSSClass]bool to choose whether to include a class
• bccd8d1a961e45dbefc7012477554d308f61b340 fix: use prettierd if available, fixes #1319

Commits

• 07dfb6e chore: update CI/CD pipleline
• 145dca1 chore: bump versions in examples
• f32707b fix: ensure version cli tool has template
• f5a9c52 docs: add templ-components to component libraries (#1447)
• 6f0deaf docs: fix dockerfile in installation section (#1396)
• 6c7c699 docs: templUI becomes shadcn-templ (#1440)
• 82a7b90 fix: JavaScript function name validation (#1400)
• bec9b04 fix: broken tests due to Go version upgrade
• 205eb60 fix: security recommendations by zizmor
• e512269 chore: update github actions to latest versions
• Additional commits viewable in compare view

Updates github.com/pdfcpu/pdfcpu from 0.16.0 to 0.16.1

Release notes

Sourced from github.com/pdfcpu/pdfcpu's releases.

v0.16.1

Security and stability update with no public API changes. Requires Go 1.26 or later.

This release fixes a denial-of-service vulnerability in grayscale and Indexed image rendering, including CalRGB palette handling. Processing a crafted PDF could cause an index-out-of-range panic and terminate the calling process if the panic was not recovered.

Versions v0.16.0 and earlier are affected. Applications extracting or rendering images from untrusted PDFs should upgrade to v0.16.1. See GHSA-6524-w46v-6399.

Improvements:

• Harden PDF parsing, image processing, JSON input handling, and signature-data parsing.
• Prevent panics when rendering grayscale and Indexed images, including palette bounds and Decode mapping checks.
• Strengthen external-link checks and reporting of problematic links; redact URL passwords in reports and CLI output.
• Improve structural validation of embedded files, 3D annotations, and multimedia dictionaries.
• Report JavaScript and supported media presence during validation without executing content or displaying script code.
• Report invalid zero-offset xref entries as skipped in relaxed validation and reject them in strict mode (#612).
• Fix strict validation of PDF dates ending in Z (#1493).
• Update the TIFF dependency to v1.0.7.

Commits

• 2f7a89a bump version
• b4ff51e Redact URL passwords in link validation reports and CLI output
• 98098e1 fix Indexed image Decode mapping and palette clamping
• b895d85 fix #612
• a251c31 fix #1493
• d0282ae refresh TIFF references for zeroed directory padding
• 10aa9df move reference inventory tests to regression repository
• b1be5ed validate 3D annotations and views
• 21d22d7 report active content during validation
• ba94f4a validate media rendition dictionaries
• Additional commits viewable in compare view