fix: replace kbpgp with fork (#28604)

lib/config/decrypt/kbpgp.ts

@@ -1,32 +1,7 @@
-import kbpgp from 'kbpgp';
+import * as kbpgp from '@renovatebot/kbpgp';
 import { logger } from '../../logger';
 import { regEx } from '../../util/regex';
 
-declare module 'kbpgp' {
-  export class KeyManager {
-    static import_from_armored_pgp(
-      opts: { armored: string },
-      cb: (err: Error, pk: KeyManager) => void,
-    ): void;
-  }
-
-  // eslint-disable-next-line @typescript-eslint/no-namespace
-  export namespace keyring {
-    export class KeyRing {
-      add_key_manager(pk: KeyManager): void;
-    }
-  }
-
-  export class Literal {
-    toString(): string;
-  }
-
-  export function unbox(
-    opts: { keyfetch: keyring.KeyRing; armored: string },
-    cb: (err: Error, literals: Literal[]) => void,
-  ): void;
-}
-
 export async function tryDecryptKbPgp(
   privateKey: string,
   encryptedStr: string,

package.json

@@ -160,6 +160,7 @@
     "@opentelemetry/sdk-trace-node": "1.23.0",
     "@opentelemetry/semantic-conventions": "1.23.0",
     "@qnighy/marshal": "0.1.3",
+    "@renovatebot/kbpgp": "3.0.1",
     "@renovatebot/osv-offline": "1.5.4",
     "@renovatebot/pep440": "3.0.20",
     "@renovatebot/ruby-semver": "3.0.23",
@@ -212,7 +213,6 @@
     "json-stringify-pretty-compact": "3.0.0",
     "json5": "2.2.3",
     "jsonata": "2.0.4",
-    "kbpgp": "2.1.15",
     "klona": "2.0.6",
     "lru-cache": "10.2.0",
     "luxon": "3.4.4",