Update GitHub Actions (main)

[renovate-rancher]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/attest	action	minor	v4.1.0 → v4.2.0
actions/checkout	action	digest	de0fac2 → d23441a
actions/checkout	action	patch	v7.0.0 → v7.0.1
actions/setup-go	action	digest	4a36011 → 924ae3a
actions/setup-go	action	minor	v6.4.0 → v6.5.0
actions/stale	action	minor	v10.3.0 → v10.4.0
azure/setup-helm	action	patch	v5.0.0 → v5.0.1
docker/build-push-action	action	minor	v7.2.0 → v7.3.0
docker/login-action	action	minor	v4.2.0 → v4.4.0	v4.5.1 (+1)
docker/setup-buildx-action	action	minor	v4.1.0 → v4.2.0
rancher/ecm-distro-tools	action	minor	v0.74.2 → v0.75.1
rancher/renovate-config	action	patch	v1.0.3 → v1.0.5
updatecli/updatecli-action	action	minor	v3.2.0 → v3.4.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

actions/attest (actions/attest)

v4.2.0

Compare Source

What's Changed

• fix: split checksums on any line ending so LF files parse on Windows by @​bdehamer in #​443
• Bump @​actions/glob from 0.6.1 to 0.7.0 in the npm-production group across 1 directory by @​dependabot[bot] in #​435
• Bump csv-parse from 6.2.1 to 7.0.1 by @​dependabot[bot] in #​437
• Read subjects from GITHUB_ARTIFACTS_LIST by @​bdehamer in #​447
• Support SHA-2 subject digests by @​bdehamer in #​446

Full Changelog: actions/attest@v4.1.1...v4.2.0

v4.1.1

Compare Source

What's Changed

• Bump tar from 7.5.9 to 7.5.10 by @​dependabot[bot] in #​371
• Bump tar from 7.5.10 to 7.5.11 by @​dependabot[bot] in #​375
• Bump the npm-production group across 1 directory with 2 updates by @​dependabot[bot] in #​404
• Bump minimatch by @​dependabot[bot] in #​399
• Bump brace-expansion from 1.1.12 to 1.1.14 by @​dependabot[bot] in #​397
• Bump undici from 6.23.0 to 6.24.1 by @​dependabot[bot] in #​381
• Bump ip-address from 10.1.0 to 10.2.0 by @​dependabot[bot] in #​411
• Bump undici from 7.25.0 to 8.2.0 by @​dependabot[bot] in #​409
• Bump tar from 7.5.11 to 7.5.17 by @​dependabot[bot] in #​429
• Bump csv-parse from 5.6.0 to 6.2.1 by @​dependabot[bot] in #​414
• Bump @​sigstore/oci from 0.6.1 to 0.7.1 by @​bdehamer in #​432

Full Changelog: actions/attest@v4.1.0...v4.1.1

actions/checkout (actions/checkout)

v7.0.1

Compare Source

• Skip running unsafe pr check if input is default by @​aiqiaoy in #​2518
• Trim only ascii whitespace for branch by @​aiqiaoy in #​2521
• Escape values passed to --unset by @​aiqiaoy in #​2530
• Various dependency updates

actions/setup-go (actions/setup-go)

v6.5.0

Compare Source

What's Changed

Dependency update

• Upgrade actions dependencies by @​priyagupta108 with @​Copilot in #​744
• Upgrade @​types/node and typescript-eslint dependencies to resolve npm audit findings by @​HarithaVattikuti in #​755
• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in #​758
• Upgrade version to 6.5.0 in package.json and package-lock.json by @​HarithaVattikuti in #​762

New Contributors

• @​priyagupta108 with @​Copilot made their first contribution in #​744
• @​jasongin made their first contribution in #​758

Full Changelog: actions/setup-go@v6...v6.5.0

actions/stale (actions/stale)

v10.4.0

Compare Source

What's Changed

Bug Fix

• Fixed only-issue-types validation by @​trueberryless in #​1338

Dependency Updates

• Bump undici to 6.27.0 via override, clean up stale license files, and version to 10.4.0. by @​dependabot in #​1342

New Contributors

• @​trueberryless made their first contribution in #​1338

Full Changelog: actions/stale@v10.3.0...v10.4.0

azure/setup-helm (azure/setup-helm)

v5.0.1

Compare Source

Fixed

• #​271 Fix TypeScript 6.0 compatibility errors in run.ts
• #​278 fix: use chmod 755 instead of 777 for downloaded helm binary and folder

Changed

• #​286 Bump actions/checkout from 6.0.3 to 7.0.0 in /.github/workflows in the actions group
• #​285 Bump the actions group with 2 updates
• #​284 Bump undici
• #​283 Bump the actions group with 5 updates
• #​280 Bump actions/checkout from 6.0.2 to 6.0.3 in /.github/workflows in the actions group
• #​279 Bump the actions group with 2 updates
• #​277 Bump vitest from 4.1.7 to 4.1.8 in the actions group
• #​276 chore: remove deprecated OliverMKing release workflow, pin to SHA
• #​275 Bump actions/stale from 10.2.0 to 10.3.0 in /.github/workflows in the actions group
• #​274 Bump the actions group with 3 updates
• #​273 Bump the actions group with 2 updates
• #​269 Bump the actions group across 1 directory with 7 updates
• #​268 Bump vite from 8.0.0 to 8.0.5
• #​260 Migrate to ESM with esbuild/vitest and upgrade to node24 (v5.0.0)

docker/build-push-action (docker/build-push-action)

v7.3.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​1567
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​1545 #​1572
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​1568
• Bump js-yaml from 4.1.1 to 4.3.0 in #​1566
• Bump tmp from 0.2.5 to 0.2.7 in #​1547
• Bump undici from 6.24.1 to 6.27.0 in #​1564
• Bump vite from 7.3.2 to 7.3.6 in #​1563

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

docker/login-action (docker/login-action)

v4.4.0

Compare Source

• Skip empty registry-auth secret mask by @​crazy-max in #​1035
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1077.0 #​1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​1022
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1076.0 #​999 #​1030
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​1004 #​1027
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​1023
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #​1017
• Bump js-yaml from 4.1.1 to 5.2.0 in #​1028
• Bump sigstore from 4.1.0 to 4.1.1 in #​1031
• Bump tmp from 0.2.5 to 0.2.7 in #​1002
• Bump undici from 6.24.1 to 6.27.0 in #​1020
• Bump vite from 7.3.3 to 7.3.6 in #​1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

docker/setup-buildx-action (docker/setup-buildx-action)

v4.2.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​572
• Bump @​actions/core from 3.0.0 to 3.0.1 in #​551
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​557 #​580
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​573
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​576
• Bump js-yaml from 4.1.1 to 5.2.0 in #​562
• Bump sigstore from 4.1.0 to 4.1.1 in #​577
• Bump tmp from 0.2.5 to 0.2.7 in #​556
• Bump undici from 6.25.0 to 6.27.0 in #​570
• Bump vite from 7.3.2 to 7.3.6 in #​569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

rancher/ecm-distro-tools (rancher/ecm-distro-tools)

v0.75.1

Compare Source

What's Changed

• Fix missing RKE2 Multus chart in release notes gen by @​rafaelbreno in #​1018

Full Changelog: rancher/ecm-distro-tools@v0.75.0...v0.75.1

v0.75.0

Compare Source

What's Changed

• chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.104.0 by @​renovate-rancher[bot] in #​996
• Add distros workflow automation by @​rafaelbreno in #​992
• add non critical cli tool for comparing charts by @​briandowns in #​998
• update librattler api by @​briandowns in #​999
• chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.32.26 by @​renovate-rancher[bot] in #​1000
• Update references workflow to support matrix by @​rafaelbreno in #​1002
• Add optional trigger-rke2 field to k3s update workflow by @​rafaelbreno in #​1004
• fix images locations unauthorized error and remove create tag workflow by @​tashima42 in #​1013

Full Changelog: rancher/ecm-distro-tools@v0.74.4...v0.75.0

v0.74.4

Compare Source

What's Changed

• Add release update rke2 references [version] command by @​rafaelbreno in #​975
• Bump slsactl to v0.1.35 by @​dereknola in #​989
• add release ecm distro tools action by @​tashima42 in #​990
• rollback pin version by @​tashima42 in #​995
• Update zizmorcore/zizmor-action action to v0.5.7 by @​renovate-rancher[bot] in #​991
• Update actions/checkout action to v7 by @​renovate-rancher[bot] in #​988
• Update rancher/ecm-distro-tools action to v0.74.3 by @​renovate-rancher[bot] in #​987
• Update docker/setup-qemu-action action to v4.1.0 by @​renovate-rancher[bot] in #​986
• Update module github.com/google/go-containerregistry to v0.21.7 by @​renovate-rancher[bot] in #​985
• Update docker/setup-buildx-action action to v4.1.0 by @​renovate-rancher[bot] in #​983
• Update docker/login-action action to v4.2.0 by @​renovate-rancher[bot] in #​982
• Update actions/setup-go digest to 924ae3a by @​renovate-rancher[bot] in #​980
• Update module github.com/aws/aws-sdk-go-v2/config to v1.32.25 by @​renovate-rancher[bot] in #​976

Full Changelog: rancher/ecm-distro-tools@v0.74.3...v0.74.4

v0.74.3

Compare Source

What's Changed

• chore(deps): update dependency mikefarah/yq to v4.53.3 by @​renovate-rancher[bot] in #​967
• chore(deps): update golang.org/x dependencies by @​renovate-rancher[bot] in #​966
• chore(deps): update github actions by @​renovate-rancher[bot] in #​962
• chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.32.24 by @​renovate-rancher[bot] in #​961
• install action: use /usr/local/bin by default by @​tashima42 in #​978

Full Changelog: rancher/ecm-distro-tools@v0.74.2...v0.74.3

rancher/renovate-config (rancher/renovate-config)

v1.0.5

Compare Source

v1.0.4

Compare Source

updatecli/updatecli-action (updatecli/updatecli-action)

v3.4.0: 🌈

Compare Source

Changes

• deps: update updatecli version to v0.119.0 @​updateclibot[bot] (#​1131)
• deps: update updatecli version to v0.118.0 @​updateclibot[bot] (#​1129)
• deps: update updatecli version to v0.119.0 @​updateclibot[bot] (#​1127)
• Bump "eslint-plugin-jest" package version @​updateclibot[bot] (#​1126)
• Bump "@​types/node" package version @​updateclibot[bot] (#​1125)
• Bump "js-yaml" package version @​updateclibot[bot] (#​1123)
• Bump "@​types/node" package version @​updateclibot[bot] (#​1124)
• Bump "eslint-plugin-jest" package version @​updateclibot[bot] (#​1122)
• Bump "@​types/node" package version @​updateclibot[bot] (#​1120)
• deps(github/action): bump all dependencies @​updateclibot[bot] (#​1102)

🧰 Maintenance

• deps: bump Updatecli GH action to v0.119.0 @​updateclibot[bot] (#​1128)

Contributors

@​updateclibot[bot] and updateclibot[bot]

v3.3.0: 🌈

Compare Source

Changes

• deps: update updatecli version to v0.118.0 @​updateclibot[bot] (#​1117)
• Bump "js-yaml" package version @​updateclibot[bot] (#​1115)
• Bump "eslint-plugin-prettier" package version @​updateclibot[bot] (#​1112)
• Bump "@​types/node" package version @​updateclibot[bot] (#​1111)
• deps: update updatecli version to v0.117.1 @​updateclibot[bot] (#​1108)
• Bump "jest" package version @​updateclibot[bot] (#​1105)
• Bump "@​types/node" package version @​updateclibot[bot] (#​1104)

🧰 Maintenance

• deps: bump Updatecli GH action to v0.117.1 @​updateclibot[bot] (#​1109)
• deps: bump Updatecli GH action to v3.2.0 @​updateclibot[bot] (#​1103)

Contributors

@​updateclibot[bot] and updateclibot[bot]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.