fix(deps): update module github.com/italia/publiccode-parser-go/v5 to v5.4.3

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/italia/publiccode-parser-go/v5	v5.2.3 → v5.4.3

---

Release Notes

italia/publiccode-parser-go (github.com/italia/publiccode-parser-go/v5)

v5.4.3

Compare Source

What's Changed

• ci: install Syft for release SBOMs by @​bfabio in #​405

Full Changelog: italia/publiccode-parser-go@v5.4.2...v5.4.3

v5.4.2

Compare Source

What's Changed

• ci: validate GoReleaser snapshots before release by @​bfabio in #​404

Full Changelog: italia/publiccode-parser-go@v5.4.1...v5.4.2

v5.4.1

Compare Source

Full Changelog: italia/publiccode-parser-go@v5.4.0...v5.4.1

What's Changed

• ci(fix): checkout before setting up Go in release workflow by @​bfabio in #​403

Full Changelog: italia/publiccode-parser-go@v5.4.0...v5.4.1

v5.4.0

Compare Source

What's Changed

• feat: support publiccode.yml 0.7 by @​bfabio in #​395

• fix: avoid allocating a new validator on every isOrganisationURI call by @​creed-bratton in #​370

• docs: add security policy by @​creed-bratton in #​360

• ci: make builds reproducible by @​bfabio in #​388

• ci: generate SBOM for release artifacts by @​creed-bratton in #​358

• ci: add OpenSSF Scorecard workflow by @​creed-bratton in #​359

• ci: add govulncheck and dependency-review workflows by @​creed-bratton in #​376

• ci: pin Go toolchain from go.mod and add go mod verify by @​bfabio in #​389

• ci: sync ipa codes weekly from italian-organizations-ipa-vocabulary by @​creed-bratton in #​369

• chore: group dependabot PRs by @​bfabio in #​366

• chore: add publiccode.yml by @​creed-bratton in #​374

• Harden HTTP client against SSRF and unbounded downloads by @​r4770 in #​402

New Contributors

• @​r4770 made their first contribution in #​402

Full Changelog: italia/publiccode-parser-go@v5.3.1...v5.4.0

v5.3.1

Compare Source

What's Changed

• chore(ci): update golangci-lint to v2.11.3 and action to v9.2.0 by @​bfabio in #​332
• refactor: migrate to github.com/goccy/go-yaml by @​bfabio in #​331
• fix: resolve field positions for keys with non numeric bracket content by @​bfabio in #​333
• test: add YAML 1.2 tests for bool aliases by @​bfabio in #​334
• fix: add nil guards for GetToken() in findKeyPos and findKeyAtLine by @​creed-bratton in #​338
• test: add comprehensive test suite for coverage by @​bfabio in #​340
• fix: case-insensitive URN namespace check in isOrganisationURI by @​creed-bratton in #​339
• ci: enable godox, noctx, errname, ireturn linters by @​creed-bratton in #​345
• test: enable POSIX language tag test for v1 description keys by @​creed-bratton in #​344
• fix: case-insensitive URN namespace check in isOrganisationURI by @​creed-bratton in #​343
• ci: enable err113, gosec, godot, perfsprint, lll linters by @​creed-bratton in #​346
• ci: enable errorlint, forcetypeassert, goconst, gocritic linters by @​creed-bratton in #​347
• chore(ci): re-enable codecov by @​bfabio in #​350
• fix: remove minimum PNG logo width check by @​bfabio in #​349
• Fix timeout by @​bfabio in #​351

New Contributors

• @​creed-bratton made their first contribution in #​338

Full Changelog: italia/publiccode-parser-go@v5.3.0...v5.3.1

v5.3.0

Compare Source

What's Changed

• feat: enforce strict BCP47 language tag validation by @​bfabio in #​280

• feat: add configurable HTTP timeout to ParserConfig by @​bfabio in #​314

• feat: expose --timeout flag in CLI by @​bfabio in #​316

• Prepare groundwork for publiccode.yml v1 parsing and support by @​bfabio in #​293

• Misc ci improvements by @​bfabio in #​307

• fix: pass baseURL explicitly instead of storing it on Parser by @​bfabio in #​312

• fix: close file handles after os.Open in Parse and validLogo by @​bfabio in #​319

• fix: handle url.Parse error in isHostInDomain by @​bfabio in #​324

• fix: replace log.Fatalf with panic in registrationFunc by @​bfabio in #​323

• perf: compile regexps once at package level by @​bfabio in #​320

• perf: misc optimization fixes by @​bfabio in #​322

• perf: parse oEmbed providers once at init instead of per call by @​bfabio in #​318

• refactor: remove redundant boolean result from isOEmbedURL() by @​bfabio in #​294

• refactor: build iPA codes lookup map at init instead of scanning per … by @​bfabio in #​317

• refactor: initialize validator and translator once at package level by @​bfabio in #​313

• refactor: replace go-oembed and shrink oEmbed JSON by @​bfabio in #​325

• test: update remote fixture expectation after fix #​47 merged by @​bfabio in #​326

Full Changelog: italia/publiccode-parser-go@v5.2.3...v5.3.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: src/go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 10 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.3 -> 1.25.0
github.com/alranel/go-vcsurl/v2	v2.0.3 -> v2.1.1
github.com/gabriel-vasile/mimetype	v1.4.3 -> v1.4.13
github.com/github/go-spdx/v2	v2.3.3 -> v2.7.0
github.com/go-playground/validator/v10	v10.18.0 -> v10.30.3
github.com/italia/httpclient-lib-go	v0.0.2 -> v0.0.3-0.20260316100201-5dd490bc4896
github.com/rivo/uniseg	v0.4.4 -> v0.4.7
golang.org/x/crypto	v0.45.0 -> v0.52.0
golang.org/x/net	v0.47.0 -> v0.54.0
golang.org/x/sys	v0.38.0 -> v0.45.0
golang.org/x/text	v0.31.0 -> v0.37.0

[pure-ff]

⏩ PureFF

• Check this box to fast-forward merge this PR