fix(deps): update middy-js monorepo to v7.6.5

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@middy/core (source)	7.6.0 → 7.6.5
@middy/input-output-logger (source)	7.6.0 → 7.6.5

---

Release Notes

middyjs/middy (@​middy/core)

v7.6.5

Compare Source

What's Changed

• @​middy/input-output-logger — refactored buildContext for durable execution mode; same behavior, cleaner branching (no functional change).
• Website: svelte rendering fix for router doc pages, minor CSS.

• CI improvements by @​willfarrell in #​1646
• SPVS Compliance by @​willfarrell in #​1647

Full Changelog: middyjs/middy@7.6.4...7.6.5

v7.6.4

Compare Source

What's Changed

• fix: sqs encoding (c60e774) — event-batch-parser: SQS body decoding fixes + test coverage
• feat: perf improvements (5a4ff11) — broad perf pass across ~30+ middlewares. Added .perf.js benchmarks for many packages. Also touched util/index.d.ts type defs.
• feat: improve pref (6a6a4ca) — http-router perf rewrite with new bench + 201 lines of new tests.
• Several ci: fix sec issues/concerns commits
• test: speed up fuzz times
• chore(deps): bump cloudflare/wrangler-action 3.15.0 → 4.0.0

Net: one SQS bug fix and a large performance pass touching most middlewares (with new bench files and tests), plus router perf improvements. No breaking API changes evident from the diff stats.

Full Changelog: middyjs/middy@7.6.3...7.6.4

v7.6.3

Compare Source

What's Changed

• Improve core perf for stream responses

Full Changelog: middyjs/middy@7.6.2...7.6.3

v7.6.2

Compare Source

What's Changed

• [bug] http-content-encoding ignores encoder options for string/buffer responses #​1641

Full Changelog: middyjs/middy@7.6.1...7.6.2

v7.6.1

Compare Source

What's Changed

• chore(deps): bump KineticCafe/actions-dco from 2.1.1 to 3.0.0 by @​dependabot[bot] in #​1637
• update http-jwt to support multiple issuers, cognito support

Breaking changes (but no one is using packages yet)

@​middy/http-jwt

• Removed secretKey option. Provide the verification key via internalKey (populated upstream by e.g. @​middy/kms, @​middy/ssm, @​middy/secrets-manager).
• Renamed cookieName → tokenCookieName.

@​middy/http-paseto

• Renamed cookieName → tokenCookieName.

Features

@​middy/http-jwt

• New issuers option for multi-issuer JWKS verification: { [iss]: { jwksUri, audience?, algorithm? } }, with built-in caching, cooldown, and prefetch (cacheExpiry, cooldownDuration, disablePrefetch).
• New token sources: tokenHeaderName, tokenQueryStringName (alongside tokenCookieName). Default is still Authorization: Bearer.
• algorithm now accepts a string or array of strings; pinned at factory time to prevent alg-substitution attacks.
• Expanded KMS keySpec compatibility table (now covers RS*/PS* for RSA, ES* for EC, EdDSA for Ed25519). Configured algorithm is validated against the keySpec and verification fails closed on mismatch.
• New setToContext option to expose the verified payload on request.context (default false, internal-only).

@​middy/http-paseto

• New tokenHeaderName and tokenQueryStringName sources.
• New setToContext option (default false).

Full Changelog: middyjs/middy@7.6.0...7.6.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.