chore(deps): update all-ci-dependencies (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v5.0.0 → v6.0.2
azure/setup-helm	action	major	v4 → v5
zgosalvez/github-actions-ensure-sha-pinned-actions	action	major	v4.0.0 → v5.0.4

---

Release Notes

actions/checkout (actions/checkout)

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

v6-beta

Compare Source

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v6.0.0

Compare Source

v6

Compare Source

v5.0.1

Compare Source

What's Changed

• Port v6 cleanup to v5 by @​ericsciple in #​2301

Full Changelog: actions/checkout@v5...v5.0.1

azure/setup-helm (azure/setup-helm)

v5

Compare Source

v5.0.0

Compare Source

Changed

• #​259 Update Node.js runtime from node20 to node24
• #​263 Bump undici
• #​257 Bump undici and @​actions/http-client
• #​256 Bump minimatch
• #​248 Bump the actions group with 2 updates
• #​247 Bump the actions group with 3 updates
• #​246 Bump @​types/node from 25.0.2 to 25.0.3 in the actions group
• #​245 Bump the actions group with 3 updates
• #​243 Bump the actions group with 2 updates
• #​240 Bump prettier from 3.6.2 to 3.7.3 in the actions group
• #​229 Bump the actions group across 1 directory with 3 updates
• #​231 Bump js-yaml from 3.14.1 to 3.14.2
• #​234 Bump glob from 10.4.5 to 10.5.0
• #​225 Fix build error
• #​222 Bump @​types/node from 24.7.2 to 24.8.1 in the actions group
• #​220 Bump the actions group across 1 directory with 4 updates
• #​216 Bump the actions group across 1 directory with 4 updates
• #​213 Bump the actions group with 2 updates
• #​211 Bump undici
• #​212 Bump jest from 30.0.5 to 30.1.2 in the actions group
• #​210 Bump @​types/node from 24.2.1 to 24.3.0 in the actions group

v4.3.1

Compare Source

Changed

• #​167 Pinning Action Dependencies for Security and Reliability
• #​181 Fix types, and update node version.
• #​191 chore(tests): Mock arch to make tests pass on arm host
• #​192 chore: remove unnecessary prebuild script
• #​203 Update helm version retrieval to use JSON output for latest version
• #​207 ci(workflows): update helm version to v3.18.4 and add matrix for tests

Added

• #​197 Add pre-commit hook

v4.3.0

Compare Source

• #​152 feat: log when restoring from cache
• #​157 Dependencies Update
• #​137 Add dependabot

v4.2.0

Compare Source

• #​124 Fix OS detection and download OS-native archive extension

v4.1.0

Compare Source

• #​130 switches to use Helm published file to read latest version instead of using GitHub releases

zgosalvez/github-actions-ensure-sha-pinned-actions (zgosalvez/github-actions-ensure-sha-pinned-actions)

v5.0.4

Compare Source

What's Changed

• Bump picomatch from 2.3.1 to 2.3.2 by @​dependabot[bot] in #​302
• Bump eslint from 10.0.3 to 10.1.0 by @​dependabot[bot] in #​301
• Bump brace-expansion by @​dependabot[bot] in #​303
• Bump yaml from 2.8.2 to 2.8.3 by @​dependabot[bot] in #​300

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.4

v5.0.3

Compare Source

What's Changed

• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​299

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.3

v5.0.2

Compare Source

What's Changed

• Bump jest from 30.2.0 to 30.3.0 by @​dependabot[bot] in #​298
• Bump eslint from 10.0.1 to 10.0.3 by @​dependabot[bot] in #​295
• Bump actions/cache from 5.0.1 to 5.0.3 by @​dependabot[bot] in #​294
• Bump undici from 6.23.0 to 6.24.1 by @​dependabot[bot] in #​297
• Bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​293
• Bump actions/setup-node from 6.1.0 to 6.2.0 by @​dependabot[bot] in #​292

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.2

v5.0.1

Compare Source

What's Changed

• Bump eslint from 10.0.0 to 10.0.1 by @​dependabot[bot] in #​287
• Bump minimatch by @​dependabot[bot] in #​289
• Bump minimatch by @​dependabot[bot] in #​290

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.1

v5.0.0

Compare Source

What's Changed

• Bump actions/cache from 4.3.0 to 5.0.1 by @​dependabot[bot] in #​277
• Bump eslint from 9.39.1 to 10.0.0 by @​dependabot[bot] in #​281
• Bump @​actions/glob from 0.5.0 to 0.6.1 by @​dependabot[bot] in #​280
• Bump @​actions/core from 1.11.1 to 3.0.0 by @​dependabot[bot] in #​282
• Potential fix for code scanning alert no. 11: Workflow does not contain permissions by @​zgosalvez in #​283
• Potential fix for code scanning alert no. 10: Workflow does not contain permissions by @​zgosalvez in #​284
• Potential fix for code scanning alert no. 12: Shell command built from environment values by @​zgosalvez in #​285
• Potential fix for code scanning alert no. 12: Shell command built from environment values by @​zgosalvez in #​286

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v4...v5.0.0

v5

Compare Source

v4.0.2

Compare Source

What's Changed

• Bump zgosalvez/github-actions-get-action-runs-using-version from 2.0.24 to 2.0.25 by @​dependabot[bot] in #​275
• Bump stefanzweifel/git-auto-commit-action from 7.0.0 to 7.1.0 by @​dependabot[bot] in #​274
• Bump actions/setup-node from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​276
• Bump actions/checkout from 6.0.0 to 6.0.1 by @​dependabot[bot] in #​278

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v4...v4.0.2

v4.0.1

Compare Source

What's Changed

• Bump actions/checkout from 5.0.0 to 6.0.0 by @​dependabot[bot] in #​270
• Bump glob from 10.4.5 to 10.5.0 by @​dependabot[bot] in #​269
• Bump js-yaml from 3.14.1 to 3.14.2 by @​dependabot[bot] in #​268
• Bump eslint from 9.36.0 to 9.39.1 by @​dependabot[bot] in #​267
• Bump actions/setup-node from 4.4.0 to 6.0.0 by @​dependabot[bot] in #​266
• Bump stefanzweifel/git-auto-commit-action from 6.0.1 to 7.0.0 by @​dependabot[bot] in #​265
• Bump jest from 30.1.3 to 30.2.0 by @​dependabot[bot] in #​260
• Bump yaml from 2.8.1 to 2.8.2 by @​dependabot[bot] in #​271

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v4...v4.0.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.