chore(deps): update dependency lima-vm/sshocker to v0.3.6

[uniget-bot]

This PR contains the following updates:

Package	Update	Change
lima-vm/sshocker	patch	0.3.5 -> 0.3.6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

lima-vm/sshocker (lima-vm/sshocker)

v0.3.6

Compare Source

What's Changed

• Add support for using sftp-server found within PATH by @​arixmkii in https://github.com/lima-vm/sshocker/pull/94
• Build(deps): Bump github.com/urfave/cli/v2 from 2.27.5 to 2.27.6 by @​dependabot in https://github.com/lima-vm/sshocker/pull/95

Full Changelog: lima-vm/sshocker@v0.3.5...v0.3.6

---

Install

curl -o sshocker --fail -L https://github.com/lima-vm/sshocker/releases/download//sshocker-$(uname -s)-$(uname -m)
chmod +x sshocker

About the binaries

The binaries were built automatically on GitHub Actions.
See the log to verify SHA256SUMS.
https://github.com/lima-vm/sshocker/actions/runs/13741206044

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[nicholasdille-bot]

Auto-approved because label type/renovate is present.

[github-actions]

🔍 Vulnerabilities of ghcr.io/uniget-org/tools/sshocker:0.3.6

📦 Image Reference ghcr.io/uniget-org/tools/sshocker:0.3.6

digest	sha256:470374548d8e064475983d876f93cc55051cad090ee95c970199ba1fb091f6cd
vulnerabilities
platform	linux/amd64
size	2.4 MB
packages	11

golang.org/x/crypto 0.31.0 (golang) pkg:golang/golang.org/x/crypto@0.31.0 Affected range <0.35.0 Fixed version 0.35.0 Description SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted.

[github-actions]

Attempting automerge. See https://github.com/uniget-org/tools/actions/runs/13743613795.

[github-actions]

PR is clean and can be merged. See https://github.com/uniget-org/tools/actions/runs/13743613795.