fix(deps): update go dependencies

[cplieger]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/cplieger/atomicfile/v2	v2.3.0 → v2.4.0
github.com/cplieger/envx	v1.2.2 → v1.3.0
github.com/cplieger/jsonx	v1.2.0 → v1.3.0
github.com/cplieger/plexapi	v1.3.2 → v1.3.4

---

Release Notes

cplieger/atomicfile (github.com/cplieger/atomicfile/v2)

v2.4.0

Compare Source

Added

• Add os.Root-confined temp sweep, bounded read, and file identity

cplieger/envx (github.com/cplieger/envx)

v1.3.0

Compare Source

Added

• Report which source a secret came from

cplieger/jsonx (github.com/cplieger/jsonx)

v1.3.0

Compare Source

Added

• Add a structural preflight rejecting duplicate keys and deep nesting

cplieger/plexapi (github.com/cplieger/plexapi)

v1.3.4

Compare Source

Fixed

• Update module github.com/cplieger/httpx/v3 to v4

v1.3.3

Compare Source

Security

• Bound the shared_servers XML decode, not just its byte size

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[cplieger]

Superseded by #395, which carried these same bumps plus the fixture fix they needed: plexapi v1.3.4 runs an xmlx preflight that refused the at-cap test's single 10 MB XML comment. main is on all four versions now.