Bump the go-modules group in /dependency/retrieval with 2 updates

[dependabot]

Bumps the go-modules group in /dependency/retrieval with 2 updates: github.com/paketo-buildpacks/packit/v2 and github.com/cloudflare/circl.

Updates github.com/paketo-buildpacks/packit/v2 from 2.25.6 to 2.25.7

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.25.7

What's Changed

• Updates go mod version to 1.26.4 by @​paketo-bot in paketo-buildpacks/packit#783

Full Changelog: paketo-buildpacks/packit@v2.25.6...v2.25.7

Commits

• e58960c Updates go mod version to 1.26.5
• c728b49 Updates go mod version to 1.26.4
• See full diff in compare view

Updates github.com/cloudflare/circl from 1.6.4 to 1.6.5

Release notes

Sourced from github.com/cloudflare/circl's releases.

CIRCL v1.6.5

What's Changed

• ascon: don't output plaintext if authentication fails by @​bwesterb in cloudflare/circl#631
• Dilithium: don't accept signatures with trailing data by @​bwesterb in cloudflare/circl#632
• Fix HPKE/KEM exact-length key unmarshaling by @​drmikecrypto in cloudflare/circl#627
• Bump x/crypto and golangci-lint by @​bwesterb in cloudflare/circl#637
• ecc/bls12381: reject trailing data in G1/G2 SetBytes by @​bwesterb in cloudflare/circl#636
• eddilithium: fail verification if signature is wrong length by @​bwesterb in cloudflare/circl#633
• tss/rsa: fix length check to prevent runtime out-of-bounds panic by @​bwesterb in cloudflare/circl#640
• dleq: verify: return false instead of panic()ing on nil parameters by @​bwesterb in cloudflare/circl#641
• ed448: document verification behaviour by @​bwesterb in cloudflare/circl#642
• ed448: reject non-canonical point encodings by @​bwesterb in cloudflare/circl#635
• slhdsa: ensure full reads when rand source is provided by @​bwesterb in cloudflare/circl#634
• ed{25519,448}: don't accept trailing data for keys by @​bwesterb in cloudflare/circl#643
• frodo: pack: fix accidental zero buffer assumption by @​bwesterb in cloudflare/circl#645
• secretsharing: check that share ID is not zero. by @​bwesterb in cloudflare/circl#644
• kyber: document pk isn't checked like ML-KEM by @​bwesterb in cloudflare/circl#648
• zk/dleq: Don't accept trailing data on proof by @​bwesterb in cloudflare/circl#649
• slhdsa: don't panic if prehash-hash is out of range by @​bwesterb in cloudflare/circl#647
• goldilocks: don't panic when unmarshalling invalid point by @​bwesterb in cloudflare/circl#646
• hpke: don't panic when unmarshalling opener/sealer from empty buffer by @​bwesterb in cloudflare/circl#656
• ot/simot: don't panic on mismatched ciphertext lengths by @​bwesterb in cloudflare/circl#655
• fourq: document point decoding is lenient by @​bwesterb in cloudflare/circl#654
• oprf: add note on multiple Point encodings by @​bwesterb in cloudflare/circl#653
• tss/rsa: don't panic when combining empty list of shares by @​bwesterb in cloudflare/circl#652
• ecc/p384: document that package is not fully constant time by @​bwesterb in cloudflare/circl#651
• ristretto: reject non-canonical scalars by @​bwesterb in cloudflare/circl#650
• Add more explicit constant time warnings by @​bwesterb in cloudflare/circl#638
• mlsbset: make Encode() constant time by @​bwesterb in cloudflare/circl#639
• mlsbset: fix stray index in Encode comment by @​lukevalenta in cloudflare/circl#658
• removeLen32Prefixed: check for possible data overflow by @​mdosch in cloudflare/circl#629
• expander: panic if requested output length overflows DST. by @​cjpatton in cloudflare/circl#664
• zk/dleq: add base point a to challenge derivation. by @​cjpatton in cloudflare/circl#663
• dh/sidh: document Import() side-effect for kem/sike. by @​cjpatton in cloudflare/circl#662
• ecc/fourq: improve constant-timeness of fpSgn, fqSqrt. by @​cjpatton in cloudflare/circl#666
• blinsign/blindrsa/partiallyblindrsa: reject malformed moduli. by @​cjpatton in cloudflare/circl#665
• blindsign/blindrsa: align PSSZERO behavior with RFC 9474. by @​cjpatton in cloudflare/circl#660
• ecc/fourq: fix fqSqr arithmetic error on amd64 by @​cjpatton in cloudflare/circl#659
• README: warn that not all packages are constant time by @​frangelbarrera in cloudflare/circl#668
• internal/test: unify ACVP test vector parsing by @​ihopenre-eng in cloudflare/circl#667
• blindrsa: fix interface documentation by @​bwesterb in cloudflare/circl#672
• ecc/fourq: fix legacy (non-BMI2) GF(p^2) multiplication on amd64 by @​bwesterb in cloudflare/circl#669
• p384: document assumed reductions by @​bwesterb in cloudflare/circl#670
• ed25519: document another divergence with crypto/ed25519 by @​bwesterb in cloudflare/circl#671
• prio3/histogram: don't panic on measurement equal to the bucket count by @​bwesterb in cloudflare/circl#673
• zk/qndleq: document Qn membership precondition by @​bwesterb in cloudflare/circl#675
• vdaf/prio3: require all prep shares by @​bwesterb in cloudflare/circl#676
• vdaf/prio3: document prep sequencing requirement by @​bwesterb in cloudflare/circl#677
• zk/dl: reject identity proof inputs by @​bwesterb in cloudflare/circl#678
• tss/rsa: document trusted modulus requirement by @​bwesterb in cloudflare/circl#680

... (truncated)

Commits

• cfa7c70 oprf: validate finalize state (#687)
• 76cf862 vdaf/prio3: reject degenerate parameters (#685)
• ddeb7fc oprf: reject invalid deterministic blinds (#688)
• 9279449 vdaf/prio3: validate preparation inputs (#683)
• e850bcd vdaf/prio3/sum: reject aggregate field overflow (#681)
• 2ce0fd7 tss/rsa: validate sign share protocol parameters (#674)
• c1552d5 vdaf/prio3/sum: reject unsafe measurement bounds (#682)
• df9fbea ot/simot: make sender sessions one-shot (#679)
• 617634a zk/dleq: validate batch shape (#684)
• cc3976a dh/csidh: harden key imports (#689)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions