Update on the Cyber Resilience Act