deps: Update dependencies for github

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v4.1.1 -> v4.1.5
actions/setup-go	action	patch	v5.0.0 -> v5.0.1
actions/upload-artifact	action	patch	v4.3.1 -> v4.3.3
github/codeql-action	action	patch	v3.25.0 -> v3.25.5
google-github-actions/auth	action	patch	v2.1.2 -> v2.1.3
google-github-actions/get-secretmanager-secrets	action	patch	v2.1.0 -> v2.1.1
ossf/scorecard-action	action	patch	v2.3.1 -> v2.3.3

---

Release Notes

actions/checkout (actions/checkout)

v4.1.5

Compare Source

What's Changed

• Update NPM dependencies by @​cory-miller in https://github.com/actions/checkout/pull/1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in https://github.com/actions/checkout/pull/1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in https://github.com/actions/checkout/pull/1707

Full Changelog: actions/checkout@v4.1.4...v4.1.5

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1692
• Add dependabot config by @​cory-miller in https://github.com/actions/checkout/pull/1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in https://github.com/actions/checkout/pull/1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in https://github.com/actions/checkout/pull/1643

v4.1.3

Compare Source

What's Changed

• Update actions/checkout version in update-main-version.yml by @​jww3 in https://github.com/actions/checkout/pull/1650
• Check git version before attempting to disable sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1656
• Add SSH user parameter by @​cory-miller in https://github.com/actions/checkout/pull/1685

Full Changelog: actions/checkout@v4.1.2...v4.1.3

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in https://github.com/actions/checkout/pull/1598

actions/setup-go (actions/setup-go)

v5.0.1

Compare Source

What's Changed

• Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by @​dependabot , @​HarithaVattikuti in https://github.com/actions/setup-go/pull/465
• Update documentation with latest V5 release notes by @​ab in https://github.com/actions/setup-go/pull/459
• Update version documentation by @​178inaba in https://github.com/actions/setup-go/pull/458
• Documentation update of actions/setup-go to v5 by @​chenrui333 in https://github.com/actions/setup-go/pull/449

New Contributors

• @​ab made their first contribution in https://github.com/actions/setup-go/pull/459

Full Changelog: actions/setup-go@v5.0.0...v5.0.1

actions/upload-artifact (actions/upload-artifact)

v4.3.3

Compare Source

What's Changed

• updating @actions/artifact dependency to v2.1.6 by @​eggyhead in https://github.com/actions/upload-artifact/pull/565

Full Changelog: actions/upload-artifact@v4.3.2...v4.3.3

v4.3.2

Compare Source

What's Changed

• Update release-new-action-version.yml by @​konradpabjan in https://github.com/actions/upload-artifact/pull/516
• Minor fix to the migration readme by @​andrewakim in https://github.com/actions/upload-artifact/pull/523
• Update readme with v3/v2/v1 deprecation notice by @​robherley in https://github.com/actions/upload-artifact/pull/561
• updating @actions/artifact dependency to v2.1.5 and @actions/core to v1.0.1 by @​eggyhead in https://github.com/actions/upload-artifact/pull/562

New Contributors

• @​andrewakim made their first contribution in https://github.com/actions/upload-artifact/pull/523

Full Changelog: actions/upload-artifact@v4.3.1...v4.3.2

github/codeql-action (github/codeql-action)

v3.25.5

Compare Source

v3.25.4

Compare Source

v3.25.3

Compare Source

v3.25.2

Compare Source

v3.25.1

Compare Source

google-github-actions/auth (google-github-actions/auth)

v2.1.3

Compare Source

What's Changed

• Security considerations: ids are strings, not integers by @​ewjoachim in https://github.com/google-github-actions/auth/pull/400
• security: bump undici from 5.28.3 to 5.28.4 by @​dependabot in https://github.com/google-github-actions/auth/pull/405
• Fix typo by @​sethvargo in https://github.com/google-github-actions/auth/pull/408
• Switch to using universe helpers by @​sethvargo in https://github.com/google-github-actions/auth/pull/410
• Add request_reason for plumbing though user-supplied audit information by @​sethvargo in https://github.com/google-github-actions/auth/pull/413
• Release: v2.1.3 by @​google-github-actions-bot in https://github.com/google-github-actions/auth/pull/414

New Contributors

• @​ewjoachim made their first contribution in https://github.com/google-github-actions/auth/pull/400

Full Changelog: google-github-actions/auth@v2.1.2...v2.1.3

google-github-actions/get-secretmanager-secrets (google-github-actions/get-secretmanager-secrets)

v2.1.1

Compare Source

What's Changed

• security: bump undici from 5.28.2 to 5.28.3 by @​dependabot in https://github.com/google-github-actions/get-secretmanager-secrets/pull/282
• security: bump undici from 5.28.3 to 5.28.4 by @​dependabot in https://github.com/google-github-actions/get-secretmanager-secrets/pull/284
• Retry GETs on error by @​glasser in https://github.com/google-github-actions/get-secretmanager-secrets/pull/285
• Update deps by @​sethvargo in https://github.com/google-github-actions/get-secretmanager-secrets/pull/286
• Release: v2.1.1 by @​google-github-actions-bot in https://github.com/google-github-actions/get-secretmanager-secrets/pull/287

New Contributors

• @​glasser made their first contribution in https://github.com/google-github-actions/get-secretmanager-secrets/pull/285

Full Changelog: google-github-actions/get-secretmanager-secrets@v2.1.0...v2.1.1

ossf/scorecard-action (ossf/scorecard-action)

v2.3.3

Compare Source

[!NOTE]
There is no v2.3.2 release as a step was skipped in the release process. This was fixed and re-released under the v2.3.3 tag

What's Changed

• 🌱 Bump github.com/ossf/scorecard/v4 (v4.13.1) to github.com/ossf/scorecard/v5 (v5.0.0-rc1) by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1366
• 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc1 to v5.0.0-rc2 by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1374
• 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0-rc2.0.20240509182734-7ce860946928 by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1377

For a full changelist of what these include, see the v5.0.0-rc1 and v5.0.0-rc2 release notes.

Documentation

• 📖 Move token discussion out of main README. by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1279
• 📖 link to ossf/scorecard workflow instead of maintaining an example by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1352
• 📖 update api links to new scorecard.dev site by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1376

Full Changelog: ossf/scorecard-action@v2.3.1...v2.3.3

v2.3.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.