[deps] Update dependency otplib to v13.3.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
otplib (source)	13.2.1 → 13.3.0

---

Release Notes

yeojz/otplib (otplib)

v13.3.0: otplib 13.3.0

Compare Source

What's Changed

• ci: standardize workflow naming and add release artifacts by @​yeojz in #​775
• chore(deps-dev): bump turbo from 2.7.5 to 2.7.6 in the dev-dependencies-patch group by @​dependabot[bot] in #​773
• chore(deps): bump changesets/action from 1.5.3 to 1.6.0 in the github-actions group by @​dependabot[bot] in #​774
• chore(deps-dev): bump the dev-dependencies-minor group with 3 updates by @​dependabot[bot] in #​772
• feat(cli): add otplib-cli application by @​yeojz in #​771
• Potential fix for code scanning alert no. 2: Workflow does not contain permissions by @​yeojz in #​776
• Implement least privilege permissions across all GitHub workflows by @​Copilot in #​777
• feat(test): add distribution tests package for cross-runtime testing by @​yeojz in #​778
• chore(deps): bump commander from 14.0.2 to 14.0.3 in the dependencies-patch group by @​dependabot[bot] in #​781
• chore(deps): bump actions/checkout from 4 to 6 in the github-actions group by @​dependabot[bot] in #​785
• chore(deps-dev): bump turbo from 2.7.6 to 2.8.1 in the dev-dependencies-minor group by @​dependabot[bot] in #​782
• chore(deps-dev): bump lefthook from 2.0.15 to 2.0.16 in the dev-dependencies-patch group by @​dependabot[bot] in #​783
• feat: security improvements and HOTP update-counter command by @​yeojz in #​780
• chore: update docs by @​yeojz in #​786
• Pin GitHub Actions to commit SHAs and update dependencies by @​yeojz in #​787
• fix: harden OTP validation and URI parsing; bubble up TOTP replay controls through otplib by @​yeojz in #​788
• feat: add OTPHooks for custom token encoding and validation by @​yeojz in #​790
• chore(deps-dev): bump the dev-dependencies-minor group with 5 updates by @​dependabot[bot] in #​791
• chore(deps-dev): bump turbo from 2.8.1 to 2.8.3 in the dev-dependencies-patch group by @​dependabot[bot] in #​792
• release(cli): v2.0.0 by @​github-actions[bot] in #​795
• chore: upgrade development Node.js baseline to 24 by @​yeojz in #​794
• chore(deps-dev): bump @​types/node from 20.19.30 to 25.2.2 by @​dependabot[bot] in #​793
• release(packages): v13.3.0 by @​github-actions[bot] in #​796

New Contributors

• @​Copilot made their first contribution in #​777

Full Changelog: yeojz/otplib@v13.2.1...v13.3.0

---

Configuration

📅 Schedule: Branch creation - At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday ( * 0-4,22-23 * * 1-5 ), Only on Sunday and Saturday ( * * * * 0,6 ) in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 32.04%. Comparing base (326f1bf) to head (7aa159c).

Additional details and impacted files

@@           Coverage Diff           @@
##           master   #14492   +/-   ##
=======================================
  Coverage   32.04%   32.04%           
=======================================
  Files        3009     3009           
  Lines      206687   206687           
  Branches    37720    37722    +2     
=======================================
+ Hits        66232    66235    +3     
+ Misses     140455   140452    -3     

Flag	Coverage Δ
opencti-client-python	45.53% <ø> (ø)
opencti-front	2.50% <ø> (-0.01%)	⬇️
opencti-graphql	68.29% <ø> (+<0.01%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.