chore(deps): update workflows

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v4.1.4 -> v4.1.6
codecov/codecov-action	action	minor	v4.3.1 -> v4.4.1
gaurav-nelson/github-action-markdown-link-check	action	digest	25b2c43 -> 7d83e59
github/codeql-action	action	patch	v3.25.3 -> v3.25.6
goreleaser/goreleaser-action	action	minor	v5.0.0 -> v5.1.0
ossf/scorecard-action	action	patch	v2.3.1 -> v2.3.3

---

Release Notes

actions/checkout (actions/checkout)

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in https://github.com/actions/checkout/pull/1732

v4.1.5

Compare Source

What's Changed

• Update NPM dependencies by @​cory-miller in https://github.com/actions/checkout/pull/1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in https://github.com/actions/checkout/pull/1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in https://github.com/actions/checkout/pull/1707

Full Changelog: actions/checkout@v4.1.4...v4.1.5

codecov/codecov-action (codecov/codecov-action)

v4.4.1

Compare Source

v4.4.0

Compare Source

What's Changed

• chore: Clarify isPullRequestFromFork by @​jsoref in https://github.com/codecov/codecov-action/pull/1411
• build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by @​dependabot in https://github.com/codecov/codecov-action/pull/1423
• build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by @​dependabot in https://github.com/codecov/codecov-action/pull/1421
• build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by @​dependabot in https://github.com/codecov/codecov-action/pull/1420
• feat: remove GPG and run on spawn by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1426
• build(deps-dev): bump @​typescript-eslint/parser from 7.8.0 to 7.9.0 by @​dependabot in https://github.com/codecov/codecov-action/pull/1428
• chore(release): 4.4.0 by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1430

Full Changelog: codecov/codecov-action@v4.3.1...v4.4.0

github/codeql-action (github/codeql-action)

v3.25.6

Compare Source

v3.25.5

Compare Source

v3.25.4

Compare Source

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v5.1.0

Compare Source

Important

This version changes the default behavior of latest to ~> v1.

The next major of this action (v6), will change this to ~> v2, and will be launched together with GoReleaser v2.

What's Changed

• docs: bump actions to latest major by @​crazy-max in https://github.com/goreleaser/goreleaser-action/pull/435
• chore(deps): bump docker/bake-action from 3 to 4 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/436
• chore(deps): bump codecov/codecov-action from 3 to 4 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/437
• chore(deps): bump actions/setup-go from 4 to 5 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/443
• chore(deps): bump actions/upload-artifact from 3 to 4 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/444
• Delete .kodiak.toml by @​vedantmgoyal9 in https://github.com/goreleaser/goreleaser-action/pull/446
• chore(deps): bump codecov/codecov-action from 3 to 4 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/448
• chore(deps): bump ip from 2.0.0 to 2.0.1 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/450
• Upgrade setup-go action version in README by @​kishaningithub in https://github.com/goreleaser/goreleaser-action/pull/455
• chore(deps): bump tar from 6.1.14 to 6.2.1 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/456
• chore: use corepack to install yarn by @​crazy-max in https://github.com/goreleaser/goreleaser-action/pull/458
• feat: lock this major version of the action to use '~> v1' as 'latest' by @​caarlos0 in https://github.com/goreleaser/goreleaser-action/pull/461
• chore(deps): bump semver from 7.6.0 to 7.6.2 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/462
• chore(deps): bump @​actions/http-client from 2.2.0 to 2.2.1 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/451

New Contributors

• @​vedantmgoyal9 made their first contribution in https://github.com/goreleaser/goreleaser-action/pull/446

Full Changelog: goreleaser/goreleaser-action@v5.0.0...v5.1.0

ossf/scorecard-action (ossf/scorecard-action)

v2.3.3

Compare Source

[!NOTE]
There is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag

What's Changed

• 🌱 Bump github.com/ossf/scorecard/v4 (v4.13.1) to github.com/ossf/scorecard/v5 (v5.0.0-rc1) by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1366
• 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to v5.0.0-rc2 by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1374
• 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0-rc2.0.20240509182734-7ce860946928 by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1377

For a full changelist of what these include, see the v5.0.0-rc1 and v5.0.0-rc2 release notes.

Documentation

• 📖 Move token discussion out of main README. by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1279
• 📖 link to ossf/scorecard workflow instead of maintaining an example by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1352
• 📖 update api links to new scorecard.dev site by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1376

Full Changelog: ossf/scorecard-action@v2.3.1...v2.3.3

v2.3.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 64.64%. Comparing base (1fa7d7a) to head (b498309).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #977      +/-   ##
==========================================
+ Coverage   64.07%   64.64%   +0.57%     
==========================================
  Files         146      146              
  Lines       11983     9312    -2671     
==========================================
- Hits         7678     6020    -1658     
+ Misses       3853     2838    -1015     
- Partials      452      454       +2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.