chore(deps): update github actions

[agntcy-automation]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/cache	action	minor	v5.0.5 → v5.1.0
docker/bake-action	action	minor	v7.2.0 → v7.3.0
docker/login-action	action	minor	v4.2.0 → v4.4.0
docker/metadata-action	action	minor	v6.1.0 → v6.2.0
docker/setup-buildx-action	action	minor	v4.1.0 → v4.2.0
docker/setup-qemu-action	action	minor	v4.1.0 → v4.2.0
dorny/paths-filter	action	patch	v4.0.1 → v4.0.2
github/codeql-action	action	patch	v4.36.2 → v4.36.3	v4.37.0
marocchino/sticky-pull-request-comment	action	patch	v3.0.4 → v3.0.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/cache (actions/cache)

v5.1.0

Compare Source

What's Changed

• Bump @​actions/cache to v5.1.0 - handle read-only cache access by @​jasongin in #​1775

Full Changelog: actions/cache@v5...v5.1.0

docker/bake-action (docker/bake-action)

v7.3.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​468
• Bump actions/github-script from 8.0.0 to 9.0.0 in /subaction/matrix in #​449
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​451 #​473
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​469
• Bump js-yaml from 4.1.1 to 4.3.0 in #​467
• Bump tmp from 0.2.5 to 0.2.7 in #​452
• Bump undici from 6.24.1 to 6.27.0 in #​465
• Bump vite from 7.3.2 to 7.3.6 in #​464

Full Changelog: docker/bake-action@v7.2.0...v7.3.0

docker/login-action (docker/login-action)

v4.4.0

Compare Source

• Skip empty registry-auth secret mask by @​crazy-max in #​1035
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1077.0 #​1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​1022
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1076.0 #​999 #​1030
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​1004 #​1027
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​1023
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #​1017
• Bump js-yaml from 4.1.1 to 5.2.0 in #​1028
• Bump sigstore from 4.1.0 to 4.1.1 in #​1031
• Bump tmp from 0.2.5 to 0.2.7 in #​1002
• Bump undici from 6.24.1 to 6.27.0 in #​1020
• Bump vite from 7.3.3 to 7.3.6 in #​1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

docker/metadata-action (docker/metadata-action)

v6.2.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​689
• Bump @​actions/core from 3.0.0 to 3.0.1 in #​663
• Bump @​actions/github from 9.0.0 to 9.1.1 in #​666
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​672 #​696
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​690
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​693
• Bump csv-parse from 6.2.1 to 7.0.0 in #​683
• Bump js-yaml from 4.1.1 to 4.3.0 in #​688
• Bump moment-timezone from 0.6.1 to 0.6.2 in #​664
• Bump semver from 7.7.4 to 7.8.5 in #​665 #​695
• Bump sigstore from 4.1.0 to 4.1.1 in #​694
• Bump tmp from 0.2.5 to 0.2.7 in #​673
• Bump undici from 6.25.0 to 6.27.0 in #​686
• Bump vite from 7.3.2 to 7.3.6 in #​685

Full Changelog: docker/metadata-action@v6.1.0...v6.2.0

docker/setup-buildx-action (docker/setup-buildx-action)

v4.2.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​572
• Bump @​actions/core from 3.0.0 to 3.0.1 in #​551
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​557 #​580
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​573
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​576
• Bump js-yaml from 4.1.1 to 5.2.0 in #​562
• Bump sigstore from 4.1.0 to 4.1.1 in #​577
• Bump tmp from 0.2.5 to 0.2.7 in #​556
• Bump undici from 6.25.0 to 6.27.0 in #​570
• Bump vite from 7.3.2 to 7.3.6 in #​569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

docker/setup-qemu-action (docker/setup-qemu-action)

v4.2.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​311
• Bump @​actions/core from 3.0.0 to 3.0.1 in #​295
• Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0 in #​315
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​312
• Bump js-yaml from 4.1.1 to 4.2.0 in #​310
• Bump tmp from 0.2.6 to 0.2.7 in #​304
• Bump undici from 6.26.0 to 6.27.0 in #​308
• Bump vite from 7.3.2 to 7.3.6 in #​307

Full Changelog: docker/setup-qemu-action@v4.1.0...v4.2.0

dorny/paths-filter (dorny/paths-filter)

v4.0.2

Compare Source

• Work around git dubious ownership errors in container jobs
• Use rev-parse instead of branch --show-current for older git compat
• Fix warning message

github/codeql-action (github/codeql-action)

v4.36.3

Compare Source

No user facing changes.

marocchino/sticky-pull-request-comment (marocchino/sticky-pull-request-comment)

v3.0.5

Compare Source

What's Changed

• build(deps-dev): Bump rollup from 4.60.1 to 4.60.2 by @​dependabot[bot] in #​1687
• build(deps-dev): Bump typescript from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​1686
• build(deps-dev): Bump @​biomejs/biome from 2.4.11 to 2.4.12 by @​dependabot[bot] in #​1685
• build(deps-dev): Bump vitest from 4.1.4 to 4.1.5 by @​dependabot[bot] in #​1688
• build(deps): Bump @​actions/glob from 0.6.1 to 0.7.0 by @​dependabot[bot] in #​1689
• build(deps): Bump @​actions/core from 3.0.0 to 3.0.1 by @​dependabot[bot] in #​1690
• build(deps): Bump @​actions/github from 9.1.0 to 9.1.1 by @​dependabot[bot] in #​1691
• build(deps-dev): Bump @​biomejs/biome from 2.4.12 to 2.4.13 by @​dependabot[bot] in #​1693
• feat: embed file content in message template via {{{content}}} placeholder by @​marocchino with @​Copilot in #​1665
• build(deps-dev): Bump @​biomejs/biome from 2.4.13 to 2.4.14 by @​dependabot[bot] in #​1694
• build(deps-dev): Bump rollup from 4.60.2 to 4.60.3 by @​dependabot[bot] in #​1695
• build(deps-dev): Bump @​types/node from 25.6.0 to 25.6.2 by @​dependabot[bot] in #​1698
• build(deps-dev): Bump @​types/node from 25.6.2 to 25.7.0 by @​dependabot[bot] in #​1700
• build(deps-dev): Bump vitest from 4.1.5 to 4.1.6 by @​dependabot[bot] in #​1701
• build(deps-dev): Bump @​types/node from 25.7.0 to 25.8.0 by @​dependabot[bot] in #​1703
• build(deps-dev): Bump rollup from 4.60.3 to 4.60.4 by @​dependabot[bot] in #​1704
• build(deps-dev): Bump @​types/node from 25.8.0 to 25.9.1 by @​dependabot[bot] in #​1707
• build(deps-dev): Bump vitest from 4.1.6 to 4.1.7 by @​dependabot[bot] in #​1708
• build(deps): Bump brace-expansion from 5.0.5 to 5.0.6 by @​dependabot[bot] in #​1705
• build(deps): Bump undici from 6.24.0 to 6.27.0 by @​dependabot[bot] in #​1725
• build(deps-dev): Bump rollup from 4.60.4 to 4.62.2 by @​dependabot[bot] in #​1722
• build(deps): Bump actions/checkout from 6 to 7 by @​dependabot[bot] in #​1721
• build(deps-dev): Bump vite from 8.0.13 to 8.0.16 by @​dependabot[bot] in #​1720
• build(deps-dev): Bump vitest from 4.1.7 to 4.1.9 by @​dependabot[bot] in #​1719
• build(deps-dev): Bump @​types/node from 25.9.1 to 26.1.0 by @​dependabot[bot] in #​1731
• build(deps-dev): Bump @​rollup/plugin-commonjs from 29.0.2 to 29.0.3 by @​dependabot[bot] in #​1710
• build(deps-dev): Bump js-yaml from 4.1.1 to 5.2.1 by @​dependabot[bot] in #​1732
• build(deps-dev): Bump @​biomejs/biome from 2.4.14 to 2.5.2 by @​dependabot[bot] in #​1730

Full Changelog: marocchino/sticky-pull-request-comment@v3.0.4...v3.0.5

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!