build(deps): Bump the go-modules group with 2 updates

[dependabot]

Bumps the go-modules group with 2 updates: github.com/Eyevinn/mp4ff and github.com/lmittmann/tint.

Updates github.com/Eyevinn/mp4ff from 0.56.0 to 0.57.0

Release notes

Sourced from github.com/Eyevinn/mp4ff's releases.

v0.57.0

Added

• saiz versions 1 and 2 (16- and 32-bit sizes, ISO/IEC 14496-12:2026) are decoded and encoded, and SaizBox.AddSampleInfo picks the lowest version that fits, so samples with more than 39 subsamples can be encrypted. GenerateFtyp adds the saie brand for them and CheckBrands checks it
• Constants for ftyp/styp brands from ISOBMFF, MP4, CMAF, DASH and codec specifications (mp4.BrandIso6, mp4.BrandCmfc, mp4.BrandLmsg, ...), and HasCompatibleBrand on FtypBox and StypBox
• InitSegment.GenerateFtyp, InitSegment.SetFtyp and MediaSegment.GenerateStyp set ftyp/styp brands from the content: lowest isoN brand, codec brands, CMAF brands, and DASH msdh/msix/lmsg
• File.CheckBrands reports ftyp/styp brands that the content contradicts or that miss spec recommendations, as BrandIssue errors and warnings, also available as mp4ff-info -brands
• Experimental paint-model subtitle boxes: stpc/wvtc sample entries, and ttmn/vttn (no change) and ttmb (TTML body only) samples, also handled by mp4ff-subslister. The 4CCs are unregistered and may change
• Fragment.AppendFullSamples, TrunBox.AppendFullSamples, SampleAccessor.AppendSamples and AppendSampleRange extract samples into caller-provided storage, so reused slices avoid allocation. Implementations of SampleAccessor outside mp4ff must add the two methods
• Fragment.Samples iterates over the full samples of a track without allocating
• hevc.ParseSPSNALUnitWithVPS parses an SPS with a map of the VPSs it may refer to, so that a multilayer extension SPS gets the chroma format, picture size, conformance window and bit depths that it does not signal itself inherited from the rep_format() of its VPS. hevc.ParseSPSNALUnit is unchanged and leaves those values unset, since the SPS payload can be parsed without them
• hevc.SPS exposes NuhLayerID, ExtOrMaxSubLayersMinus1, MultiLayerExtSpsFlag, UpdateRepFormatFlag, SpsRepFormatIdx, InferScalingListFlag and ScalingListRefLayerID, and hevc.RepFormat exposes SeparateColourPlaneFlag, ConformanceWindowFlag and ConformanceWindow
• RsotBox for the Redundant Sample Original Timing Box (rsot) of ISO/IEC 14496-12:2026 Section 8.8.18, a traf child that documents that the first sample of a track fragment is a copy of the previous sample and how long that sample has already run (ElapsedDuration), and that the fragment's last sample was truncated to fit and how long it was meant to last (OriginalDuration). Either duration may be signalled on its own, and CreateRsotBox sets the flags from the non-zero arguments. It is reachable as TrafBox.Rsot
• AudioSampleEntryBox.NormalizeQuickTime rewrites a QuickTime-shaped audio sample entry (sound sample description version 1 or 2, QuickTime residue in the version 0 reserved fields, or a wave-wrapped esds) to the plain ISO version 0 form with the esds as a direct child. Entries without a reachable esds, and wave boxes holding anything besides their recognized decoder-init atoms, are left untouched

... (truncated)

Changelog

Sourced from github.com/Eyevinn/mp4ff's changelog.

[0.57.0] - 2026-09-29

Added

• saiz versions 1 and 2 (16- and 32-bit sizes, ISO/IEC 14496-12:2026) are decoded and encoded, and SaizBox.AddSampleInfo picks the lowest version that fits, so samples with more than 39 subsamples can be encrypted. GenerateFtyp adds the saie brand for them and CheckBrands checks it
• Constants for ftyp/styp brands from ISOBMFF, MP4, CMAF, DASH and codec specifications (mp4.BrandIso6, mp4.BrandCmfc, mp4.BrandLmsg, ...), and HasCompatibleBrand on FtypBox and StypBox
• InitSegment.GenerateFtyp, InitSegment.SetFtyp and MediaSegment.GenerateStyp set ftyp/styp brands from the content: lowest isoN brand, codec brands, CMAF brands, and DASH msdh/msix/lmsg
• File.CheckBrands reports ftyp/styp brands that the content contradicts or that miss spec recommendations, as BrandIssue errors and warnings, also available as mp4ff-info -brands
• Experimental paint-model subtitle boxes: stpc/wvtc sample entries, and ttmn/vttn (no change) and ttmb (TTML body only) samples, also handled by mp4ff-subslister. The 4CCs are unregistered and may change
• Fragment.AppendFullSamples, TrunBox.AppendFullSamples, SampleAccessor.AppendSamples and AppendSampleRange extract samples into caller-provided storage, so reused slices avoid allocation. Implementations of SampleAccessor outside mp4ff must add the two methods
• Fragment.Samples iterates over the full samples of a track without allocating
• hevc.ParseSPSNALUnitWithVPS parses an SPS with a map of the VPSs it may refer to, so that a multilayer extension SPS gets the chroma format, picture size, conformance window and bit depths that it does not signal itself inherited from the rep_format() of its VPS. hevc.ParseSPSNALUnit is unchanged and leaves those values unset, since the SPS payload can be parsed without them
• hevc.SPS exposes NuhLayerID, ExtOrMaxSubLayersMinus1, MultiLayerExtSpsFlag, UpdateRepFormatFlag, SpsRepFormatIdx, InferScalingListFlag and ScalingListRefLayerID, and hevc.RepFormat exposes SeparateColourPlaneFlag, ConformanceWindowFlag and ConformanceWindow
• RsotBox for the Redundant Sample Original Timing Box (rsot) of ISO/IEC 14496-12:2026 Section 8.8.18, a traf child that documents that the first sample of a track fragment is a copy of the previous sample and how long that sample has already run (ElapsedDuration), and that the fragment's last sample was truncated to fit and how long it was meant to last (OriginalDuration). Either duration may be signalled on its own, and CreateRsotBox sets the flags from the non-zero arguments. It is reachable as TrafBox.Rsot
• AudioSampleEntryBox.NormalizeQuickTime rewrites a QuickTime-shaped audio sample entry (sound sample description version 1 or 2, QuickTime residue in the version 0 reserved fields, or a wave-wrapped esds) to the plain ISO version 0 form with the esds as a direct child. Entries without a reachable esds, and wave boxes holding anything besides their recognized decoder-init

... (truncated)

Commits

• bcd8110 chore: prepare v0.57.0 release
• 0545edb feat(mp4): support saiz versions 1 and 2
• e1ebb37 feat(mp4ff-info): check ftyp and styp brands with -brands
• 92641d7 feat(mp4): check ftyp and styp brands against the content
• 69bbd1b fix(mp4): make the defragmenter's ftyp from the progressive output
• d6734fc feat(mp4): generate ftyp and styp brands from the content
• 4736755 fix(mp4): pick the media header of an empty track from its handler type
• c3cf21c feat(mp4): add brand constants and share one ftyp/styp implementation
• b71e56c fix(mp4): bound streamed sample reads by the mdat payload
• 0b34c21 feat(mp4): sample extraction with caller-provided storage, and a Samples iter...
• Additional commits viewable in compare view

Updates github.com/lmittmann/tint from 1.2.0 to 1.2.1

Release notes

Sourced from github.com/lmittmann/tint's releases.

v1.2.1

What's Changed

• Fix group color inheritance by @​database64128 in lmittmann/tint#111

Full Changelog: lmittmann/tint@v1.2.0...v1.2.1

Commits

• ce10bb1 Fix group color inheritance (#111)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions