chore(deps): update dependency altcha to v3.3.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
altcha (source)	3.2.4 → 3.3.0

---

Release Notes

altcha-org/altcha (altcha)

v3.3.0

Compare Source

• Fix: SHA key derivation hashes the full digest each round and truncates once, matching altcha-lib and the server ports (SHA-384/512 and any keyLength below the digest size with cost > 1 previously failed server verification)
• Fix: PBKDF2 supports any keyLength (uses deriveBits instead of an AES-GCM key)
• Fix: built-in deriveKey functions reject unsupported algorithm names
• Fix: verifySolution requires the re-derived key to match the signed keyPrefix, rejects malformed derivedKey/counter values, and validates secrets and hmacAlgorithm
• Fix: createChallenge validates its options (keyPrefixLength below the derived key length, non-empty hex keyPrefix lowercased before signing, positive integer cost/keyLength, valid counter and expiresAt)
• Fix: solveChallenge fails fast on an invalid keyPrefix
• Fix: hexToBuffer rejects non-hex input; canonical JSON keeps __proto__ keys
• Fix: verifyServerSignature validates algorithm and hmacSecret, handles a missing signature, and uses exact expiry
• Fix: obfuscation plugin encrypts with the full derived key instead of a keyPrefixLength-sized prefix

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.