Build(deps): Bump node-forge and jsonld-signatures

[dependabot]

Removes node-forge. It's no longer used after updating ancestor dependency jsonld-signatures. These dependencies need to be updated together.

Removes node-forge

Updates jsonld-signatures from 6.0.0 to 11.5.0

Changelog

Sourced from jsonld-signatures's changelog.

11.5.0 - 2024-12-17

Added

• Add support for signing @direction in documents when using the base LinkedDataSignature class. Other cryptosuites may already support @direction if they were not using this class.

11.4.0 - 2024-12-15

Added

• Add support for validating proof with domain expressed as an array.

11.3.2 - 2024-11-06

Fixed

• Ensure proof.@context is unmodified for JCS Data Integrity Cryptosuites.

11.3.1 - 2024-10-02

Fixed

• Ensure verification method ID is a string when checking controller proof purpose.

11.3.0 - 2024-08-01

Changed

• Use rdf-canonize directly to get latest updates and avoid reliance on jsonld package to provide it indirectly.

11.2.1 - 2023-05-14

Fixed

• Ensure internal _getProofs helper is synchronous.

11.2.0 - 2023-05-13

Added

• Add support for derive function to be implemented by the given cryptosuite. The derive function is used to derive a new document with a new proof based on an existing document (and proof). The derive function will be used when calling derive from jsonld-signatures. WARNING: The derive API will be considered unstable for a short while to ensure it meets the needs of external cryptosuites. It could change without a major version update (via a minor or patch release) until this notice is removed. If this is a concern for you, do not use it until this notice is removed.
• Any existing proofSet from the input document will be passed to the createProof and verifyProof functions in LinkedDataProof and LinkedDataSignature. It will also be passed to createVerifyData in LinkedDataSignature.

... (truncated)

Commits

• 20ae61e Release 11.5.0.
• 3b230a0 Update changelog.
• 4fb416b Use node 20.x when testing karma.
• 352d3f4 Support signing @direction w/LinkedDataSignature.
• 3577088 Start 11.4.1-0.
• 37344b8 Release 11.4.0.
• 7b21798 Update changelog.
• 2cf5922 Support validating proof with domain expressed as an array.
• 8b7beb0 Start 11.3.3-0.
• 7ad5552 Release 11.3.2.
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}