fix(deps): update module maunium.net/go/mautrix to v0.26.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
maunium.net/go/mautrix	v0.26.2 → v0.26.4

---

Release Notes

mautrix/go (maunium.net/go/mautrix)

v0.26.4

Compare Source

• Breaking change (client) Changed request structs that include UIA
  (register, upload cross-signing keys, delete devices) to take the auth data
  as a type parameter.
• (crypto) Changed device key mismatches in Megolm decryption to mark the
  message as untrusted instead of failing entirely.
• (crypto) Added new column to save origin of received Megolm sessions.
• (bridgev2) Added support for setting custom profile fields (e.g. m.tz)
  for ghosts.
• (bridgev2/commands) Added delete-chat command to delete chats on the
  remote network.
• (client) Updated MSC2666 implementation to use stable endpoint.
• (client) Stopped logging large (>32 KiB) request bodies.
• (bridgev2/portal) Fixed potential deadlock when a portal ID change races
  with room creation.
• (bridgev2/portal) Fixed the third reaction from Matrix being handled
  incorrectly on networks that only allow one reaction per message.
• (bridgev2/database) Fixed finding first message in thread in case the thread
  contains messages with a lower timestamp than the root message.
• (bridgev2/commands) Fixed login QR codes not having appropriate file info.
• (bridgev2/commands) Fixed user input steps not working correctly after a
  display step.
• (format/htmlparser) Fixed generating markdown for code blocks containing
  backticks.
• (federation/eventauth) Fixed inverted check in ban membership authorization
  (thanks to [@​nexy7574] in #​464).

v0.26.3

Compare Source

• Bumped minimum Go version to 1.25.
• (client) Added fields for sending MSC4354 sticky events.
• (bridgev2) Added automatic message request accepting when sending message.
• (mediaproxy) Added support for federation thumbnail endpoint.
• (crypto/ssss) Improved support for recovery keys with slightly broken
  metadata.
• (crypto) Changed key import to call session received callback even for
  sessions that already exist in the database.
• (appservice) Fixed building websocket URL accidentally using file path
  separators instead of always /.
• (crypto) Fixed key exports not including the sender_claimed_keys field.
• (client) Fixed incorrect context usage in async uploads.
• (crypto) Fixed panic when passing invalid input to megolm message index
  parser used for debugging.
• (bridgev2/provisioning) Fixed completed or failed logins not being cleaned
  up properly.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 7 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.24.10 -> 1.25.0
filippo.io/edwards25519	v1.1.1 -> v1.2.0
go.mau.fi/util	v0.9.5 -> v0.9.7
golang.org/x/crypto	v0.47.0 -> v0.49.0
golang.org/x/exp	v0.0.0-20260112195511-716be5621a96 -> v0.0.0-20260312153236-7ab1446f8b90
golang.org/x/net	v0.49.0 -> v0.52.0
golang.org/x/sys	v0.40.0 -> v0.42.0
golang.org/x/text	v0.33.0 -> v0.35.0