chore(deps): update module github.com/protonmail/go-crypto to v1.5.1

[renovate-sh-app]

This PR contains the following updates:

Package	Type	Update	Change	Pending
github.com/ProtonMail/go-crypto	indirect	minor	v1.4.1 → v1.5.1	v1.5.2

---

Release Notes

ProtonMail/go-crypto (github.com/ProtonMail/go-crypto)

v1.5.1

Compare Source

What's Changed

• Harden handling of malformed OpenPGP input in #​332
• Ensure rsa key gen test works with go 1.27 in #​334

Full Changelog: ProtonMail/go-crypto@v1.5.0...v1.5.1

v1.5.0

Compare Source

What's Changed

• Implement ML-KEM, ML-DSA, and SLH-DSA in #​316
• Bump github.com/cloudflare/circl to 1.6.3 in #​302
• Ensure generated RSA key primes satisfy P < Q constraint in #​305
• Add Signature.IssuerKeyVersion field in #​310
• Fix RSA precompute after prime swap in #​317
• openpgp: prevent panic when candidate identity has no self-signature in #​313
• guard nil issuer key id when checking trailing signature in #​320
• guard nil issuer key id on v2 message read path in #​319
• Don't panic on unknown AEAD mode in v5/v6 SKESK packets in #​322
• restrict embedding to embeddable signature types in #​325
• fix: Malformed session key decoding in PKESK in #​330
• fix: Do not accept malformed ecdh sk input in #​329
• fix: Reduce risk of invalid slice access in #​331

Full Changelog: ProtonMail/go-crypto@v1.4.1...v1.5.0

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • Between 08:00 AM and 04:59 PM, Monday through Thursday (* 8-16 * * 1-4)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

[grafana-plugins-platform-bot]

indirect minor bump (v1.4.1→v1.5.1) touching only go.mod/go.sum, with changelogs showing only bug fixes/hardening and no breaking changes, and the package isn't directly referenced in this repo's source.