chore(deps): update all-ci-dependencies (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azure/setup-helm	action	major	v4 → v5
codecov/codecov-action	action	major	v5.5.2 → v6.0.0
docker/setup-buildx-action	action	major	v3.12.0 → v4.0.0
docker/setup-qemu-action	action	major	v3.7.0 → v4.0.0
goreleaser/goreleaser-action	action	major	v6.4.0 → v7.1.0
zgosalvez/github-actions-ensure-sha-pinned-actions	action	major	v4.0.2 → v5.0.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

azure/setup-helm (azure/setup-helm)

v5

Compare Source

v5.0.0

Compare Source

Changed

• #​259 Update Node.js runtime from node20 to node24
• #​263 Bump undici
• #​257 Bump undici and @​actions/http-client
• #​256 Bump minimatch
• #​248 Bump the actions group with 2 updates
• #​247 Bump the actions group with 3 updates
• #​246 Bump @​types/node from 25.0.2 to 25.0.3 in the actions group
• #​245 Bump the actions group with 3 updates
• #​243 Bump the actions group with 2 updates
• #​240 Bump prettier from 3.6.2 to 3.7.3 in the actions group
• #​229 Bump the actions group across 1 directory with 3 updates
• #​231 Bump js-yaml from 3.14.1 to 3.14.2
• #​234 Bump glob from 10.4.5 to 10.5.0
• #​225 Fix build error
• #​222 Bump @​types/node from 24.7.2 to 24.8.1 in the actions group
• #​220 Bump the actions group across 1 directory with 4 updates
• #​216 Bump the actions group across 1 directory with 4 updates
• #​213 Bump the actions group with 2 updates
• #​211 Bump undici
• #​212 Bump jest from 30.0.5 to 30.1.2 in the actions group
• #​210 Bump @​types/node from 24.2.1 to 24.3.0 in the actions group

v4.3.1

Compare Source

Changed

• #​167 Pinning Action Dependencies for Security and Reliability
• #​181 Fix types, and update node version.
• #​191 chore(tests): Mock arch to make tests pass on arm host
• #​192 chore: remove unnecessary prebuild script
• #​203 Update helm version retrieval to use JSON output for latest version
• #​207 ci(workflows): update helm version to v3.18.4 and add matrix for tests

Added

• #​197 Add pre-commit hook

v4.3.0

Compare Source

• #​152 feat: log when restoring from cache
• #​157 Dependencies Update
• #​137 Add dependabot

v4.2.0

Compare Source

• #​124 Fix OS detection and download OS-native archive extension

v4.1.0

Compare Source

• #​130 switches to use Helm published file to read latest version instead of using GitHub releases

codecov/codecov-action (codecov/codecov-action)

v6

Compare Source

v6.0.0

Compare Source

⚠️ This version introduces support for node24 which make cause breaking changes for systems that do not currently support node24. ⚠️

What's Changed

• Revert "Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"" by @​thomasrockhu-codecov in #​1929
• Th/6.0.0 by @​thomasrockhu-codecov in #​1928

Full Changelog: codecov/codecov-action@v5.5.4...v6.0.0

v5.5.4

Compare Source

This is a mirror of v5.5.2. v6 will be released which requires node24

What's Changed

• Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" by @​thomasrockhu-codecov in #​1926
• chore(release): 5.5.4 by @​thomasrockhu-codecov in #​1927

Full Changelog: codecov/codecov-action@v5.5.3...v5.5.4

v5.5.3

Compare Source

What's Changed

• build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by @​dependabot[bot] in #​1874
• chore(release): bump to 5.5.3 by @​thomasrockhu-codecov in #​1922

Full Changelog: codecov/codecov-action@v5.5.2...v5.5.3

docker/setup-buildx-action (docker/setup-buildx-action)

v4

Compare Source

v4.0.0

Compare Source

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in #​483
• Remove deprecated inputs/outputs by @​crazy-max in #​464
• Switch to ESM and update config/test wiring by @​crazy-max in #​481
• Bump @​actions/core from 1.11.1 to 3.0.0 in #​475
• Bump @​docker/actions-toolkit from 0.63.0 to 0.79.0 in #​482 #​485
• Bump js-yaml from 4.1.0 to 4.1.1 in #​452
• Bump lodash from 4.17.21 to 4.17.23 in #​472
• Bump minimatch from 3.1.2 to 3.1.5 in #​480

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

docker/setup-qemu-action (docker/setup-qemu-action)

v4

Compare Source

v4.0.0

Compare Source

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in #​245
• Switch to ESM and update config/test wiring by @​crazy-max in #​241
• Bump @​actions/core from 1.11.1 to 3.0.0 in #​244
• Bump @​docker/actions-toolkit from 0.67.0 to 0.77.0 in #​243
• Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 in #​240
• Bump js-yaml from 3.14.1 to 3.14.2 in #​231
• Bump lodash from 4.17.21 to 4.17.23 in #​238

Full Changelog: docker/setup-qemu-action@v3.7.0...v4.0.0

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v7.1.0

Compare Source

What's Changed

• feat: verify release checksum and cosign signature by @​caarlos0 in #​550
• docs: document cosign verification in README by @​caarlos0 in #​553
• docs: Upgrade import GPG action version by @​flecno in #​547
• ci: drop docker-bake in favor of plain npm by @​caarlos0 in #​551
• ci: add release-major-tag workflow by @​caarlos0 in #​552
• ci: drop pre-cosign-v3 goreleaser versions from tests by @​caarlos0 in #​554
• ci(deps): bump the actions group with 2 updates by @​dependabot[bot] in #​543
• ci(deps): bump the actions group with 5 updates by @​dependabot[bot] in #​546
• chore(deps): bump undici from 6.23.0 to 6.24.1 by @​dependabot[bot] in #​545

New Contributors

• @​flecno made their first contribution in #​547

Full Changelog: goreleaser/goreleaser-action@v7...v7.1.0

v7.0.0

Compare Source

What's Changed

• feat!: node 24, update deps, rm yarn, ESM by @​caarlos0 in #​533
• sec: pin github action versions by @​caarlos0 in #​514
• docs: Upgrade checkout GitHub Action in README.md by @​dunglas in #​507
• chore(deps): bump actions/checkout from 4 to 5 by @​dependabot[bot] in #​504
• ci(deps): bump the actions group with 2 updates by @​dependabot[bot] in #​517
• ci(deps): bump the actions group with 2 updates by @​dependabot[bot] in #​523
• ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the actions group by @​dependabot[bot] in #​526
• ci(deps): bump the actions group across 1 directory with 4 updates by @​dependabot[bot] in #​532
• ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by @​dependabot[bot] in #​534
• chore(deps): bump the npm group across 1 directory with 4 updates by @​dependabot[bot] in #​536
• chore(deps): bump @​actions/http-client from 3.0.2 to 4.0.0 in the npm group by @​dependabot[bot] in #​537
• ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in the actions group by @​dependabot[bot] in #​538
• chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by @​dependabot[bot] in #​539

Full Changelog: goreleaser/goreleaser-action@v6...v7.0.0

v7

Compare Source

zgosalvez/github-actions-ensure-sha-pinned-actions (zgosalvez/github-actions-ensure-sha-pinned-actions)

v5.0.4

Compare Source

What's Changed

• Bump picomatch from 2.3.1 to 2.3.2 by @​dependabot[bot] in #​302
• Bump eslint from 10.0.3 to 10.1.0 by @​dependabot[bot] in #​301
• Bump brace-expansion by @​dependabot[bot] in #​303
• Bump yaml from 2.8.2 to 2.8.3 by @​dependabot[bot] in #​300

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.4

v5.0.3

Compare Source

What's Changed

• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​299

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.3

v5.0.2

Compare Source

What's Changed

• Bump jest from 30.2.0 to 30.3.0 by @​dependabot[bot] in #​298
• Bump eslint from 10.0.1 to 10.0.3 by @​dependabot[bot] in #​295
• Bump actions/cache from 5.0.1 to 5.0.3 by @​dependabot[bot] in #​294
• Bump undici from 6.23.0 to 6.24.1 by @​dependabot[bot] in #​297
• Bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​293
• Bump actions/setup-node from 6.1.0 to 6.2.0 by @​dependabot[bot] in #​292

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.2

v5.0.1

Compare Source

What's Changed

• Bump eslint from 10.0.0 to 10.0.1 by @​dependabot[bot] in #​287
• Bump minimatch by @​dependabot[bot] in #​289
• Bump minimatch by @​dependabot[bot] in #​290

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.1

v5.0.0

Compare Source

What's Changed

• Bump actions/cache from 4.3.0 to 5.0.1 by @​dependabot[bot] in #​277
• Bump eslint from 9.39.1 to 10.0.0 by @​dependabot[bot] in #​281
• Bump @​actions/glob from 0.5.0 to 0.6.1 by @​dependabot[bot] in #​280
• Bump @​actions/core from 1.11.1 to 3.0.0 by @​dependabot[bot] in #​282
• Potential fix for code scanning alert no. 11: Workflow does not contain permissions by @​zgosalvez in #​283
• Potential fix for code scanning alert no. 10: Workflow does not contain permissions by @​zgosalvez in #​284
• Potential fix for code scanning alert no. 12: Shell command built from environment values by @​zgosalvez in #​285
• Potential fix for code scanning alert no. 12: Shell command built from environment values by @​zgosalvez in #​286

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v4...v5.0.0

v5

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.