chore(deps): update github-actions

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	digest	cbb7224 -> 85e6279
actions/setup-go	action	minor	v5.2.0 -> v5.3.0
actions/setup-java	action	minor	v4.5.0 -> v4.6.0
actions/setup-node	action	minor	v4.1.0 -> v4.2.0
actions/setup-node	action	digest	39370e3 -> 1d0ff46
actions/upload-artifact	action	minor	v4.4.3 -> v4.6.0
github/codeql-action	action	minor	v3.27.9 -> v3.28.6
softprops/action-gh-release	action	minor	v2.1.0 -> v2.2.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/setup-go (actions/setup-go)

v5.3.0

Compare Source

What's Changed

• Use the new cache service: upgrade @actions/cache to ^4.0.0 by @​Link- in https://github.com/actions/setup-go/pull/531
• Configure Dependabot settings by @​HarithaVattikuti in https://github.com/actions/setup-go/pull/530
• Document update - permission section by @​HarithaVattikuti in https://github.com/actions/setup-go/pull/533
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in https://github.com/actions/setup-go/pull/534

New Contributors

• @​Link- made their first contribution in https://github.com/actions/setup-go/pull/531

Full Changelog: actions/setup-go@v5...v5.3.0

actions/setup-java (actions/setup-java)

v4.6.0

Compare Source

What's Changed

Add-ons:

• Add Support for JetBrains Runtime by @​gmitch215 in https://github.com/actions/setup-java/pull/637

 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: ‘jetbrains’
     java-version: '21'

Bug fixes:

• Fix Ubuntu-latest CI failures by @​mahabaleshwars in https://github.com/actions/setup-java/pull/693

New Contributors

• @​gmitch215 made their first contribution in https://github.com/actions/setup-java/pull/637

Full Changelog: actions/setup-java@v4...v4.6.0

actions/setup-node (actions/setup-node)

v4.2.0

Compare Source

actions/upload-artifact (actions/upload-artifact)

v4.6.0

Compare Source

What's Changed

• Expose env vars to control concurrency and timeout by @​yacaovsnc in https://github.com/actions/upload-artifact/pull/662

Full Changelog: actions/upload-artifact@v4...v4.6.0

v4.5.0

Compare Source

github/codeql-action (github/codeql-action)

v3.28.6

Compare Source

v3.28.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.5 - 24 Jan 2025

• Update default CodeQL bundle version to 2.20.3. #​2717

See the full CHANGELOG.md for more information.

v3.28.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.4 - 23 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.3 - 22 Jan 2025

• Update default CodeQL bundle version to 2.20.2. #​2707
• Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #​2710
• Uploading debug artifacts for CodeQL analysis is temporarily disabled. #​2712

See the full CHANGELOG.md for more information.

v3.28.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.2 - 21 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.1 - 10 Jan 2025

• CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #​2677
• Update default CodeQL bundle version to 2.20.1. #​2678

See the full CHANGELOG.md for more information.

v3.28.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.28.0 - 20 Dec 2024

• Bump the minimum CodeQL bundle version to 2.15.5. #​2655
• Don't fail in the unusual case that a file is on the search path. #​2660.

See the full CHANGELOG.md for more information.

softprops/action-gh-release (softprops/action-gh-release)

v2.2.1

Compare Source

What's Changed

Bug fixes 🐛

• fix: big file uploads by @​xen0n in https://github.com/softprops/action-gh-release/pull/562

Other Changes 🔄

• chore(deps): bump @​types/node from 22.10.1 to 22.10.2 by @​dependabot in https://github.com/softprops/action-gh-release/pull/559
• chore(deps): bump @​types/node from 22.10.2 to 22.10.5 by @​dependabot in https://github.com/softprops/action-gh-release/pull/569
• chore: update error and warning messages for not matching files in files field by @​ytimocin in https://github.com/softprops/action-gh-release/pull/568

New Contributors

• @​ytimocin made their first contribution in https://github.com/softprops/action-gh-release/pull/568

Full Changelog: softprops/action-gh-release@v2.2.0...v2.2.1

v2.2.0

Compare Source

What's Changed

Exciting New Features 🎉

• feat: read the release assets asynchronously by @​xen0n in https://github.com/softprops/action-gh-release/pull/552

Bug fixes 🐛

• fix(docs): clarify the default for tag_name by @​alexeagle in https://github.com/softprops/action-gh-release/pull/544

Other Changes 🔄

• chore(deps): bump typescript from 5.6.3 to 5.7.2 by @​dependabot in https://github.com/softprops/action-gh-release/pull/548
• chore(deps): bump @​types/node from 22.9.0 to 22.9.4 by @​dependabot in https://github.com/softprops/action-gh-release/pull/547
• chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 by @​dependabot in https://github.com/softprops/action-gh-release/pull/545
• chore(deps): bump @​vercel/ncc from 0.38.2 to 0.38.3 by @​dependabot in https://github.com/softprops/action-gh-release/pull/543
• chore(deps): bump prettier from 3.3.3 to 3.4.1 by @​dependabot in https://github.com/softprops/action-gh-release/pull/550
• chore(deps): bump @​types/node from 22.9.4 to 22.10.1 by @​dependabot in https://github.com/softprops/action-gh-release/pull/551
• chore(deps): bump prettier from 3.4.1 to 3.4.2 by @​dependabot in https://github.com/softprops/action-gh-release/pull/554

New Contributors

• @​alexeagle made their first contribution in https://github.com/softprops/action-gh-release/pull/544
• @​xen0n made their first contribution in https://github.com/softprops/action-gh-release/pull/552

Full Changelog: softprops/action-gh-release@v2.1.0...v2.2.0

---

Configuration

📅 Schedule: Branch creation - "* 0-3 1 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.