deps(deps): update nginx installer deps

[renovate]

This PR contains the following updates:

Package	Update	Change
nginx/nginx	patch	1.29.7 → 1.29.8
openssl/openssl	patch	3.6.1 → 3.6.2

---

Release Notes

nginx/nginx (nginx/nginx)

v1.29.8

Compare Source

nginx-1.29.8 mainline version has been released.

See official CHANGES on nginx.org.

Below is a release summary generated by GitHub.

What's Changed

• Fixed the "include" directive inside the "geo" block. by @​jimf5 in #​1184
• SSL: compatibility with OpenSSL 4.0. by @​pluknet in #​1183
• Update CONTRIBUTING.md by @​xuruidong in #​1195
• Upstream: fixed processing multiple 103 (early hints) responses. by @​pluknet in #​1241
• Removed CLOCK_MONOTONIC_FAST support. by @​jimf5 in #​1243
• Upstream: fix integer underflow in charset parsing by @​DavidKorczynski in #​1170
• Added max_headers directive by @​dekobon in #​1116
• fix $request_port / $is_request_port being empty if auth_request is used by @​Zoey2936 in #​1248
• Upstream: reset early_hints_length on upstream reinit. by @​devnexen in #​1187
• nginx-1.29.8-RELEASE by @​pluknet in #​1252

New Contributors

• @​jimf5 made their first contribution in #​1184
• @​xuruidong made their first contribution in #​1195
• @​DavidKorczynski made their first contribution in #​1170
• @​dekobon made their first contribution in #​1116
• @​Zoey2936 made their first contribution in #​1248

Full Changelog: nginx/nginx@release-1.29.7...release-1.29.8

openssl/openssl (openssl/openssl)

v3.6.2: OpenSSL 3.6.2

Compare Source

OpenSSL 3.6.2 is a security patch release. The most severe CVE fixed in this
release is Moderate.

This release incorporates the following bug fixes and mitigations:

• Fixed incorrect failure handling in RSA KEM RSASVE encapsulation.
  (CVE-2026-31790)

• Fixed loss of key agreement group tuple structure when the DEFAULT keyword
  is used in the server-side configuration of the key-agreement group list.
  (CVE-2026-2673)

• Fixed out-of-bounds read in AES-CFB-128 on x86-64 CPUs with AVX-512 support.
  (CVE-2026-28386)

• Fixed potential use-after-free in DANE client code.
  (CVE-2026-28387)

• Fixed NULL pointer dereference when processing a delta CRL.
  (CVE-2026-28388)

• Fixed possible NULL dereference when processing CMS KeyAgreeRecipientInfo.
  (CVE-2026-28389)

• Fixed possible NULL dereference when processing CMS
  KeyTransportRecipientInfo.
  (CVE-2026-28390)

• Fixed heap buffer overflow in hexadecimal conversion.
  (CVE-2026-31789)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.