build(deps): bump github.com/libregraph/lico from 0.61.1 to 0.61.2

Bumps [github.com/libregraph/lico](https://github.com/libregraph/lico) from 0.61.1 to 0.61.2.
- [Changelog](https://github.com/libregraph/lico/blob/master/CHANGELOG.md)
- [Commits](https://github.com/libregraph/lico/compare/v0.61.1...v0.61.2)

---
updated-dependencies:
- dependency-name: github.com/libregraph/lico
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

vendor/github.com/libregraph/lico/CHANGELOG.md

@@ -4,6 +4,14 @@
 
 
 
+## v0.61.2 (2024-02-19)
+
+- Limit oidc check session iframe postMessage hook scope
+- Bump vite from 4.5.0 to 4.5.2 in /identifier
+- Bump follow-redirects from 1.14.8 to 1.15.4 in /identifier
+- Bump golang.org/x/crypto from 0.14.0 to 0.17.0
+
+
 ## v0.61.1 (2023-11-22)
 
 - Fix branding settings cache usage

vendor/github.com/libregraph/lico/identifier/package.json

@@ -61,7 +61,7 @@
     "jsdom": "^22.1.0",
     "source-map-explorer": "^1.8.0",
     "typescript": "^5.2.2",
-    "vite": "^4.5.0",
+    "vite": "^4.5.2",
     "vite-plugin-checker": "^0.6.2",
     "vite-plugin-eslint": "^1.8.1",
     "vitest": "^0.34.6"

vendor/github.com/libregraph/lico/oidc/provider/html.go

@@ -188,7 +188,7 @@ c.u(b.B());c.u(n.substr(0,64-(d.f[1]+8&63)));c.c(d.f[0]<<3|d.f[0]>>>28);c.c(d.f[
 		window.addEventListener('message', function(event) {
 			// Only do something when receiving a message from our parent or
 			// from another window which shares our parent.
-			if (window.parent === event.source || window.parent === event.source.parent) {
+			if (window.parent === event.source || (window !== event.source && window.parent === event.source.parent)) {
 				var response = receiveMessage(event.origin, event.data);
 				event.source.postMessage(response, event.origin);
 			}