[doa-renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/matrix-org/matrix-hookshot	minor	7.5.0 → 7.6.0

---

Release Notes

matrix-org/matrix-hookshot (ghcr.io/matrix-org/matrix-hookshot)

v7.6.0

Compare Source

Features

• Serve the compiled OpenProject element-web module in docker under /modules/v1/static/openproject.js. (#​1399)

Bugfixes

• Fix integrations tests failing to due an improper test setup. (#​1404)

Internal Changes

• Update matrix-bot-sdk / matrix-appservice-bridge to latest versions. (#​1370)
• Support Node 26, and drop support for Node 22. (#​1370)
• Refactor the OpenProject element-web plugin module to use the MVVM pattern. (#​1402)
• Refactor the OpenProject element-web plugin module to use CSS instead of the styled components package. (#​1405)
• Update rustls-webpki and webpki-root-certs to stop trusting compromised eMudhra intermediate certificates (RUSTSEC-2026-0382, RUSTSEC-2026-0383). (#​1441)
• Update the base Node.js images to address the following high/medium/low CVE's CVE-2026-105482,
  CVE-2026-105483, CVE-2026-106069, CVE-2026-111497, CVE-2026-105481, CVE-2026-106072, CVE-2026-106074,
  CVE-2026-106070, CVE-2026-106071 and CVE-2026-106073.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.