Update github actions (main) (minor)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	minor	v5.0.3 → v5.1.0
actions/checkout	action	minor	v6.0.2 → v6.1.0
actions/setup-go	action	minor	v6.1.0 → v6.5.0
conforma/pr-size-label-action	action	minor	v1.0.0 → v1.2.0
docker/login-action	action	minor	v3.6.0 → v3.7.0
golangci/golangci-lint-action	action	minor	v9.2.0 → v9.3.0
ko-build/setup-ko	action	minor	v0.9 → v0.10

---

Release Notes

actions/cache (actions/cache)

v5.1.0

Compare Source

What's Changed

• Bump @​actions/cache to v5.1.0 - handle read-only cache access by @​jasongin in #​1775

Full Changelog: actions/cache@v5...v5.1.0

v5.0.5

Compare Source

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in #​1747

Full Changelog: actions/cache@v5...v5.0.5

v5.0.4

Compare Source

What's Changed

• Add release instructions and update maintainer docs by @​Link- in #​1696
• Potential fix for code scanning alert no. 52: Workflow does not contain permissions by @​Link- in #​1697
• Fix workflow permissions and cleanup workflow names / formatting by @​Link- in #​1699
• docs: Update examples to use the latest version by @​XZTDean in #​1690
• Fix proxy integration tests by @​Link- in #​1701
• Fix cache key in examples.md for bun.lock by @​RyPeck in #​1722
• Update dependencies & patch security vulnerabilities by @​Link- in #​1738

New Contributors

• @​XZTDean made their first contribution in #​1690
• @​RyPeck made their first contribution in #​1722

Full Changelog: actions/cache@v5...v5.0.4

actions/checkout (actions/checkout)

v6.1.0

Compare Source

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

actions/setup-go (actions/setup-go)

v6.5.0

Compare Source

v6.4.0

Compare Source

What's Changed

Enhancement

• Add go-download-base-url input for custom Go distributions by @​gdams in #​721

Dependency update

• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in #​727

Documentation update

• Rearrange README.md, add advanced-usage.md by @​priyagupta108 in #​724
• Fix Microsoft build of Go link by @​gdams in #​734

New Contributors

• @​gdams made their first contribution in #​721

Full Changelog: actions/setup-go@v6...v6.4.0

v6.3.0

Compare Source

What's Changed

• Update default Go module caching to use go.mod by @​priyagupta108 in #​705
• Fix golang download url to go.dev by @​178inaba in #​469

Full Changelog: actions/setup-go@v6...v6.3.0

v6.2.0

Compare Source

What's Changed

Enhancements

• Example for restore-only cache in documentation by @​aparnajyothi-y in #​696
• Update Node.js version in action.yml by @​ccoVeille in #​691
• Documentation update of actions/checkout by @​deining in #​683

Dependency updates

• Upgrade js-yaml from 3.14.1 to 3.14.2 by @​dependabot in #​682
• Upgrade @​actions/cache to v5 by @​salmanmkc in #​695
• Upgrade actions/checkout from 5 to 6 by @​dependabot in #​686
• Upgrade qs from 6.14.0 to 6.14.1 by @​dependabot in #​703

New Contributors

• @​ccoVeille made their first contribution in #​691
• @​deining made their first contribution in #​683

Full Changelog: actions/setup-go@v6...v6.2.0

conforma/pr-size-label-action (conforma/pr-size-label-action)

v1.2.0

Compare Source

What's Changed

• ci: add release workflow with major version tag management by @​robnester-rh in #​23

Full Changelog: conforma/pr-size-label-action@v1...v1.2.0

v1.1.0

Compare Source

Highlights

• Node.js 24 runtime — upgraded from Node.js 20 ahead of the GitHub Actions deprecation deadline
• @actions/core v2 — updated from v1
• Apache-2.0 license — corrected in package.json
• Separated entrypoint from logic — src/main.js entrypoint, src/index.js exports run() for testability
• Non-PR event guard — fails fast with a clear message if triggered on a non-PR event
• Tightened label filter — matches size: prefix (with trailing space) to avoid collisions
• 23 unit tests — comprehensive Jest test suite added
• Node.js version pinning — .nvmrc and engines field added
• npm audit fixes — resolved known vulnerabilities in dependencies

What's Changed

What's Changed

• Configure Renovate by @​renovate[bot] in #​1
• Update README with correct YAML examples and optimization details by @​dheerajodha in #​5
• chore: Add Apache 2.0 LICENSE file by @​dheerajodha in #​6
• Update dependency @​actions/core to v2 by @​renovate[bot] in #​7
• Update dependency jest to v30 by @​renovate[bot] in #​2
• Update the renovate.json to be Conforma-specific by @​dheerajodha in #​4
• chore: Update action runtime from Node.js 20 to Node.js 24 by @​robnester-rh in #​17
• chore: remove stale index.js.backup file by @​robnester-rh in #​19
• chore: add Node.js version pinning by @​robnester-rh in #​20
• fix(deps): address npm audit vulnerabilities by @​robnester-rh in #​21
• fix: correct license field to Apache-2.0 by @​robnester-rh in #​18
• EC-1738: Add unit tests for size label calculation by @​robnester-rh in #​22

New Contributors

• @​renovate[bot] made their first contribution in #​1
• @​dheerajodha made their first contribution in #​5
• @​robnester-rh made their first contribution in #​17

Full Changelog: conforma/pr-size-label-action@v1.0.0...v1.1.0

docker/login-action (docker/login-action)

v3.7.0

Compare Source

• Add scope input to set scopes for the authentication token by @​crazy-max in #​912
• Add support for AWS European Sovereign Cloud ECR by @​dphi in #​914
• Ensure passwords are redacted with registry-auth input by @​crazy-max in #​911
• build(deps): bump lodash from 4.17.21 to 4.17.23 in #​915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

golangci/golangci-lint-action (golangci/golangci-lint-action)

v9.3.0

Compare Source

What's Changed

Changes

• feat: add no-run-logs-group as experimental option by @​ldez in #​1403

Dependencies

• build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 in the github-actions group by @​dependabot[bot] in #​1395
• build(deps): bump tmp from 0.2.5 to 0.2.6 by @​dependabot[bot] in #​1397
• build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 in the github-actions group by @​dependabot[bot] in #​1398
• build(deps): bump tmp from 0.2.6 to 0.2.7 by @​dependabot[bot] in #​1399
• build(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 by @​dependabot[bot] in #​1400

Full Changelog: golangci/golangci-lint-action@v9.2.1...v9.3.0

v9.2.1

Compare Source

What's Changed

IMPORTANT: this is the first immutable release.

Changes

• chore: improve workflows by @​ldez in #​1394

Dependencies

• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot[bot] in #​1325
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1326
• build(deps): bump the dependencies group with 4 updates by @​dependabot[bot] in #​1327
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1328
• build(deps): bump @​types/node from 25.0.2 to 25.0.3 in the dependencies group by @​dependabot[bot] in #​1329
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1330
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1332
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1333
• build(deps): bump the dependencies group with 6 updates by @​dependabot[bot] in #​1334
• build(deps-dev): bump the dev-dependencies group with 4 updates by @​dependabot[bot] in #​1335
• build(deps): bump the dependencies group with 2 updates by @​dependabot[bot] in #​1336
• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot[bot] in #​1337
• build(deps): bump @​types/node from 25.0.9 to 25.0.10 in the dependencies group by @​dependabot[bot] in #​1338
• build(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 by @​dependabot[bot] in #​1339
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1340
• build(deps-dev): bump the dev-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​1344
• build(deps): bump fast-xml-parser from 5.3.4 to 5.3.6 by @​dependabot[bot] in #​1346
• build(deps): bump minimatch by @​dependabot[bot] in #​1348
• build(deps): bump minimatch from 3.1.3 to 3.1.5 by @​dependabot[bot] in #​1350
• build(deps): bump fast-xml-parser from 5.3.6 to 5.4.1 by @​dependabot[bot] in #​1351
• build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 by @​dependabot[bot] in #​1357
• build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 by @​dependabot[bot] in #​1358
• build(deps-dev): bump flatted from 3.3.3 to 3.4.2 by @​dependabot[bot] in #​1359
• build(deps): bump picomatch from 4.0.3 to 4.0.4 by @​dependabot[bot] in #​1364
• build(deps): bump yaml from 2.8.2 to 2.8.3 by @​dependabot[bot] in #​1365
• build(deps): bump brace-expansion by @​dependabot[bot] in #​1370
• build(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates by @​ldez in #​1374
• build(deps): bump github/codeql-action from 4 to 4.35.2 by @​dependabot[bot] in #​1384
• build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 by @​dependabot[bot] in #​1386
• build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 by @​dependabot[bot] in #​1389
• build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 by @​dependabot[bot] in #​1391

Full Changelog: golangci/golangci-lint-action@v9.2.0...v9.2.1

ko-build/setup-ko (ko-build/setup-ko)

v0.10

Compare Source

What's Changed

• Harden composite action against shell expression and env-file injection by @​imjasonh with @​Copilot in #​66

New Contributors

• @​imjasonh with @​Copilot made their first contribution in #​66

Full Changelog: ko-build/setup-ko@v0.9...v0.10

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

✅ Validation Successful

All checks passed! Your PR is ready for review.

Validation Results:

• ✅ Code formatting
• ✅ License headers
• ✅ Unit tests
• ✅ Linting
• ✅ Kubernetes manifests
• ✅ Container build
• ✅ Security scan

View workflow details

Workflow: PR Validation
Commit: 6853a09

[github-actions]

✅ Validation Successful

All checks passed! Your PR is ready for review.

Validation Results:

• ✅ Code formatting
• ✅ License headers
• ✅ Unit tests
• ✅ Linting
• ✅ Kubernetes manifests
• ✅ Container build
• ✅ Security scan

View workflow details

Workflow: PR Validation
Commit: 6fb8ef5

[github-actions]

✅ Validation Successful

All checks passed! Your PR is ready for review.

Validation Results:

• ✅ Code formatting
• ✅ License headers
• ✅ Unit tests
• ✅ Linting
• ✅ Kubernetes manifests
• ✅ Container build
• ✅ Security scan

View workflow details

Workflow: PR Validation
Commit: 7babc5e

[github-actions]

✅ Validation Successful

All checks passed! Your PR is ready for review.

Validation Results:

• ✅ Code formatting
• ✅ License headers
• ✅ Unit tests
• ✅ Linting
• ✅ Kubernetes manifests
• ✅ Container build
• ✅ Security scan

View workflow details

Workflow: PR Validation
Commit: 5d8e0dc

[github-actions]

❌ Validation Failed

Some checks failed. Please review and fix the issues.

Next Steps:

1. Check the workflow logs for details
2. Fix any failing checks locally:
   • Format: go fmt ./...
   • License headers: make license-add
   • Tests: go test ./...
   • Lint: golangci-lint run
3. Push your fixes to update this PR

View workflow details

Workflow: PR Validation
Commit: e896cf2
Status: failure

[github-actions]

❌ Validation Failed

Some checks failed. Please review and fix the issues.

Next Steps:

1. Check the workflow logs for details
2. Fix any failing checks locally:
   • Format: go fmt ./...
   • License headers: make license-add
   • Tests: go test ./...
   • Lint: golangci-lint run
3. Push your fixes to update this PR

View workflow details

Workflow: PR Validation
Commit: af8f95b
Status: failure

[github-actions]

❌ Validation Failed

Some checks failed. Please review and fix the issues.

Next Steps:

1. Check the workflow logs for details
2. Fix any failing checks locally:
   • Format: go fmt ./...
   • License headers: make license-add
   • Tests: go test ./...
   • Lint: golangci-lint run
3. Push your fixes to update this PR

View workflow details

Workflow: PR Validation
Commit: dd6c8fe
Status: failure

[github-actions]

❌ Validation Failed

Some checks failed. Please review and fix the issues.

Next Steps:

1. Check the workflow logs for details
2. Fix any failing checks locally:
   • Format: go fmt ./...
   • License headers: make license-add
   • Tests: go test ./...
   • Lint: golangci-lint run
3. Push your fixes to update this PR

View workflow details

Workflow: PR Validation
Commit: 394a8c4
Status: failure

[github-actions]

❌ Validation Failed

Some checks failed. Please review and fix the issues.

Next Steps:

1. Check the workflow logs for details
2. Fix any failing checks locally:
   • Format: go fmt ./...
   • License headers: make license-add
   • Tests: go test ./...
   • Lint: golangci-lint run
3. Push your fixes to update this PR

View workflow details

Workflow: PR Validation
Commit: 2fd1e87
Status: failure

[github-actions]

❌ Validation Failed

Some checks failed. Please review and fix the issues.

Next Steps:

1. Check the workflow logs for details
2. Fix any failing checks locally:
   • Format: go fmt ./...
   • License headers: make license-add
   • Tests: go test ./...
   • Lint: golangci-lint run
3. Push your fixes to update this PR

View workflow details

Workflow: PR Validation
Commit: 7f34409
Status: failure

[github-actions]

❌ Validation Failed

Some checks failed. Please review and fix the issues.

Next Steps:

1. Check the workflow logs for details
2. Fix any failing checks locally:
   • Format: go fmt ./...
   • License headers: make license-add
   • Tests: go test ./...
   • Lint: golangci-lint run
3. Push your fixes to update this PR

View workflow details

Workflow: PR Validation
Commit: cc73ea4
Status: failure

[github-actions]

❌ Validation Failed

Some checks failed. Please review and fix the issues.

Next Steps:

1. Check the workflow logs for details
2. Fix any failing checks locally:
   • Format: go fmt ./...
   • License headers: make license-add
   • Tests: go test ./...
   • Lint: golangci-lint run
3. Push your fixes to update this PR

View workflow details

Workflow: PR Validation
Commit: 580e8e1
Status: failure

[github-actions]

❌ Validation Failed

Some checks failed. Please review and fix the issues.

Next Steps:

1. Check the workflow logs for details
2. Fix any failing checks locally:
   • Format: go fmt ./...
   • License headers: make license-add
   • Tests: go test ./...
   • Lint: golangci-lint run
3. Push your fixes to update this PR

View workflow details

Workflow: PR Validation
Commit: c85e3a5
Status: failure

[github-actions]

❌ Validation Failed

Some checks failed. Please review and fix the issues.

Next Steps:

1. Check the workflow logs for details
2. Fix any failing checks locally:
   • Format: go fmt ./...
   • License headers: make license-add
   • Tests: go test ./...
   • Lint: golangci-lint run
3. Push your fixes to update this PR

View workflow details

Workflow: PR Validation
Commit: e6c0b93
Status: failure