chore(deps): update github actions

[agntcy-automation]

This PR contains the following updates:

Package	Type	Update	Change	Pending
docker/setup-qemu-action	action	minor	v4.2.0 → v4.3.0	v4.4.0
github/codeql-action	action	minor	v4.37.8 → v4.38.0
renovatebot/github-action	action	minor	v46.2.2 → v46.3.0	v46.3.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

docker/setup-qemu-action (docker/setup-qemu-action)

v4.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.92.0 to 0.96.0 in #​336
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​316
• Bump brace-expansion from 1.1.15 to 1.1.18 in #​332
• Bump js-yaml from 4.2.0 to 4.3.1 in #​334
• Bump postcss from 8.5.10 to 8.5.25 in #​331
• Bump sigstore from 4.1.0 to 4.1.1 in #​317
• Bump undici from 6.27.0 to 6.28.0 in #​333

Full Changelog: docker/setup-qemu-action@v4.2.0...v4.3.0

github/codeql-action (github/codeql-action)

v4.38.0

Compare Source

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #​4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #​4072
• Update default CodeQL bundle version to 2.27.0. #​4129

v4.37.9

Compare Source

• Update default CodeQL bundle version to 2.26.4. #​4106

renovatebot/github-action (renovatebot/github-action)

v46.3.0

Compare Source

Features

• support forwarding list of env vars to renovate container (#​1032) (300c83c)

Documentation

• update references to renovatebot/github-action to v46.2.6 (3faa2c5)

Miscellaneous Chores

• deps: update dependency globals to v17.12.0 (3f58ef0)
• deps: update dependency typescript-eslint to v8.69.0 (#​1079) (5aa1617)
• deps: update node.js to v24.21.0 (e2492d8)

Continuous Integration

• deps: update ghcr.io/renovatebot/renovate docker tag to v44.66.1 (475bf62)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.69.10 (aa7362f)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.69.11 (c7ada95)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.69.12 (cc851b7)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.69.13 (2bdf2c7)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.69.3 (3759ca2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.69.5 (98a66dd)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.69.6 (0abb50b)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.69.7 (8c00ab7)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.69.8 (7e11e2e)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.69.9 (9fce251)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.71.0 (6c6f767)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.72.0 (22adb15)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.73.0 (d7415a3)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.74.0 (0cc29c5)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.74.1 (cf0e81f)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.75.1 (99eb860)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.75.2 (11d862d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.79.1 (941720f)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.79.2 (7f28c50)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.79.5 (66ec983)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.79.6 (c46a127)
• deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.30.1 (#​1080) (719210e)
• deps: update zizmorcore/zizmor-action action to v0.6.4 (8578ddd)

v46.2.6

Compare Source

Documentation

• update references to renovatebot/github-action to v46.2.5 (48ae7cc)

Miscellaneous Chores

• deps: update dependency lint-staged to v17.4.1 (d282d54)
• deps: update dependency typescript-eslint to v8.68.0 (#​1078) (a523046)
• deps: update pnpm/action-setup action to v6.1.0 (102d218)

Build System

• deps: lock file maintenance (3b757d0)

Continuous Integration

• deps: update ghcr.io/renovatebot/renovate docker tag to v44.52.1 (9984ec7)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.53.0 (faa6419)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.54.0 (2c96ef7)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.56.0 (dcb55da)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.56.1 (e2c9386)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.56.2 (913f400)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.56.3 (5e6fc58)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.57.2 (d469fc4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.59.1 (66c7016)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.59.2 (ec50768)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.59.3 (31ef1b9)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.61.1 (d6e525c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.61.3 (a2fa5a6)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.61.4 (d01e774)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.61.5 (d37ca4c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.61.6 (0849a31)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.64.0 (e8a4545)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.64.1 (878ced9)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.65.0 (a2ab6bc)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.65.2 (3e5ee14)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.65.5 (6530be9)

v46.2.5

Compare Source

Documentation

• update references to renovatebot/github-action to v46.2.4 (c2ba0df)

Miscellaneous Chores

• deps: update node.js to v24.20.0 (8bff989)

Build System

• deps: lock file maintenance (40119c0)

Continuous Integration

• deps: update ghcr.io/renovatebot/renovate docker tag to v44.40.0 (7776f7b)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.43.1 (1a8a884)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.44.0 (94a8afa)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.45.2 (91a1ccd)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.45.3 (9df3426)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.45.4 (c0c2060)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.46.0 (246e8c4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.46.1 (a2cef85)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.46.2 (3ce659c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.46.4 (cd8ceb2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.46.5 (8f94c87)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.46.6 (7997c61)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.48.0 (a60af3a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.48.1 (508cd10)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.48.2 (cca913a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.48.3 (d450fc2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.49.0 (0afb379)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.49.1 (c409f02)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.50.1 (dbb0a9b)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.50.2 (f51cd98)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.50.3 (34b46a4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.51.0 (ea6c45c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.51.2 (9774ab2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.52.0 (e753d3e)
• deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.30.0 (92becf5)
• deps: update zizmorcore/zizmor-action action to v0.6.3 (ea548b4)

v46.2.4

Compare Source

Documentation

• update references to renovatebot/github-action to v46.2.3 (42d0056)

Build System

• deps: lock file maintenance (e3c0c2e)

v46.2.3

Compare Source

Documentation

• update references to renovatebot/github-action to v46.2.2 (49f4ea0)

Miscellaneous Chores

• deps: update actions/cache action to v6 (#​1070) (90e0199)
• deps: update actions/setup-node action to v7 (#​1071) (498e972)
• deps: update commitlint monorepo to v21 (#​1073) (22967b6)
• deps: update dependency @​semantic-release/git to v11 (#​1074) (bea653f)
• deps: update dependency @​tsconfig/node24 to v24.0.5 (72cf06d)
• deps: update dependency esbuild to v0.28.2 (0e6d970)
• deps: update dependency eslint-plugin-json to v5 (#​1075) (63f2879)
• deps: update dependency globals to v17.10.0 (d402615)
• deps: update dependency globals to v17.11.0 (675198d)
• deps: update dependency semantic-release to v25.0.9 (ac9a74d)
• deps: update dependency typescript-eslint to v8.66.0 (af5132f)
• deps: update dependency typescript-eslint to v8.67.0 (39cdfd1)
• fix zizmor errors (#​1072) (613ec41)

Build System

• deps: lock file maintenance (7df1c30)

Continuous Integration

• deps: update dependency actions/checkout to v7 (#​1077) (d6180bb)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.17.2 (8695952)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.17.3 (82eda2d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.20.1 (f478bc0)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.22.0 (755e0d3)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.23.0 (3cb9274)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.23.3 (4436421)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.24.2 (15b3538)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.24.3 (489f1d0)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.25.0 (3683bf4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.26.0 (e133651)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.27.0 (e22f3f6)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.28.0 (2057af5)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.29.2 (56c415f)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.29.4 (88330ca)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.29.5 (cf40db9)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.30.0 (359d861)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.30.1 (be07738)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.30.2 (4c3519a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.30.3 (a08a921)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.30.4 (fff9ff0)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.31.0 (e5d35d4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.32.1 (be027ab)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.32.2 (e5b51b4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.32.5 (21f4128)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.32.6 (c3a9bd4)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.33.2 (ef454f0)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.34.0 (ec74cb7)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.34.3 (ba4c5a2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.35.0 (7313a0d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.35.1 (4e11059)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.35.2 (3ae4864)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.35.3 (f0c13d2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.35.4 (c16c31c)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.36.0 (8778c4a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.37.1 (aaaf809)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.38.0 (67e8c5f)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.39.0 (a7eb6cf)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.39.1 (faf9cdc)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.39.2 (2e028a9)
• deps: update ghcr.io/renovatebot/renovate docker tag to v44.39.3 (7359be7)

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!