fix(deps): update dependency hpke to v1.1.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
hpke	1.0.6 → 1.1.4

---

Release Notes

panva/hpke (hpke)

v1.1.4

Compare Source

Documentation

• render API indexes as tables (8c4c53e)
• update references (3d4ba10)

Refactor

• types: preserve concrete KEM key types (218318f)

v1.1.3

Compare Source

Refactor

• aead: enforce plaintext size limits (e9ebab5)
• context: bound sequence counter by nonce size (7d577c0)
• dhkem: centralize KDF stage handling (26c50b0)

v1.1.2

Compare Source

Refactor

• avoid copying/slicing buffersource inputs before subtle() (afc7ad3), closes #​38
• avoid HKDF empty-salt HMAC key re-import (e560e1e)
• avoid HKDF PRK re-import on subsequent Expand calls (d67626d)
• generate non-extractable ephemeral keys in hybrid KEM encapsulation (ef79333)
• validate two-stage KDF Export length limit of 255*Nh upfront (08ddc98)

v1.1.1

Compare Source

Documentation

• add a caution block to the ML-KEM-512 export (bde2f68)
• update examples (cd67c2f)

Refactor

• avoid AEAD key re-import on subsequent Context.Open/Seal (c36c54c)
• cache ASCII label encodings at module scope (20eedf2)
• inline ComputeNonce and drop xor helper (772ca09)
• NIST curve DeserializePrivateKey and DeriveKeyPair optimizations (11b6c55)

v1.1.0

Compare Source

Features

• add Web Cryptography-based TurboSHAKE KDF exports (a29413b)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm.
npm error code EMISSINGTARGET
npm error Missing target in lock file: "packages/shared" is referenced by "node_modules/@ppg/shared" but does not exist.
npm error To fix:
npm error 1. rm package-lock.json
npm error 2. npm install
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-09-04T23_39_47_868Z-debug-0.log