chore(deps): update dependency pyasn1 to v0.6.4

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
pyasn1 (changelog)	==0.6.3 → ==0.6.4

---

Release Notes

pyasn1/pyasn1 (pyasn1)

v0.6.4

Compare Source

• CVE-2026-59885 (GHSA-8ppf-4f7h-5ppj): Fixed quadratic time
  complexity in the OBJECT IDENTIFIER and RELATIVE-OID decoders.
  A small crafted substrate encoding many arcs could consume
  excessive CPU. Arcs are now accumulated in linear time; decoded
  values are unchanged (thanks for reporting, tynus2)
• CVE-2026-59884 (GHSA-m4p7-r5rc-7g4j): Limited BER long-form tag
  IDs to 20 octets (140 bits), matching the OID arc limit introduced
  in 0.6.2. Unbounded tag IDs allowed a crafted substrate to consume
  excessive CPU and memory; longer tag IDs are now rejected with
  PyAsn1Error. Also fixed Tag and TagSet repr() failing on huge tag
  (thanks for reporting, mikeappsec)
  IDs due to the integer-to-string conversion limit (Python 3.11+)
• CVE-2026-59886 (GHSA-hm4w-wwcw-mr6r): Fixed excessive memory and
  CPU consumption in Real.float() for values with large base-10
  exponents. Conversion no longer materializes huge intermediate
  integers; values too large to represent as a Python float raise
  OverflowError promptly, and prettyPrint() renders them as
  '' as before. Also fixed base-10 mantissa normalization
  to use exact integer arithmetic; mantissas larger than 2**53
  could previously lose precision through float division
  (thanks for reporting, gvozdila)
• Pinned PyPI publish GitHub Action to an immutable commit
  pr #​113

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.