chore(deps): update github-actions

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	digest	692973e -> 9a9194f
actions/download-artifact	action	patch	v4.1.7 -> v4.1.8
actions/setup-go	action	patch	v5.0.1 -> v5.0.2
actions/setup-node	action	patch	v4.0.2 -> v4.0.3
actions/setup-node	action	digest	60edb5d -> 1e60f62
actions/upload-artifact	action	patch	v4.3.3 -> v4.3.5
github/codeql-action	action	patch	v3.25.11 -> v3.25.15
gradle/gradle-build-action	action	minor	v3.4.2 -> v3.5.0
ossf/scorecard-action	action	minor	v2.3.3 -> v2.4.0
softprops/action-gh-release	action	patch	v2.0.6 -> v2.0.8

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/download-artifact (actions/download-artifact)

v4.1.8

Compare Source

What's Changed

• Update @​actions/artifact version, bump dependencies by @​robherley in https://github.com/actions/download-artifact/pull/341

Full Changelog: actions/download-artifact@v4...v4.1.8

actions/setup-go (actions/setup-go)

v5.0.2

Compare Source

actions/setup-node (actions/setup-node)

v4.0.3

Compare Source

actions/upload-artifact (actions/upload-artifact)

v4.3.5

Compare Source

v4.3.4

Compare Source

What's Changed

• Update @​actions/artifact version, bump dependencies by @​robherley in https://github.com/actions/upload-artifact/pull/584

Full Changelog: actions/upload-artifact@v4.3.3...v4.3.4

github/codeql-action (github/codeql-action)

v3.25.15

Compare Source

v3.25.14

Compare Source

v3.25.13

Compare Source

v3.25.12

Compare Source

gradle/gradle-build-action (gradle/gradle-build-action)

v3.5.0

Compare Source

[!IMPORTANT]
As of v3 this action has been superceded by gradle/actions/setup-gradle.
Any workflow that uses gradle/gradle-build-action@v3 will transparently delegate to gradle/actions/setup-gradle@v3.

Users are encouraged to update their workflows, replacing:

uses: gradle/gradle-build-action@v3

with

uses: gradle/actions/setup-gradle@v3

See the setup-gradle documentation for up-to-date documentation for gradle/actions/setup-gradle.

For release details, see https://github.com/gradle/actions/releases/tag/v3.5.0

ossf/scorecard-action (ossf/scorecard-action)

v2.4.0

Compare Source

What's Changed

This update bumps the Scorecard version to the v5 release. For a complete list of changes, please refer to the v5.0.0 release notes. Of special note to Scorecard Action is the Maintainer Annotation feature, which can be used to suppress some Code Scanning false positives. Alerts will not be generated for any Scorecard Check with an annotation.

• 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0 by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1410
• 🐛 lower license sarif alert threshold to 9 by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1411

Documentation

• docs: dogfooding badge by @​jkowalleck in https://github.com/ossf/scorecard-action/pull/1399

New Contributors

• @​jkowalleck made their first contribution in https://github.com/ossf/scorecard-action/pull/1399

Full Changelog: ossf/scorecard-action@v2.3.3...v2.4.0

softprops/action-gh-release (softprops/action-gh-release)

v2.0.8

Compare Source

What's Changed

Other Changes 🔄

• chore(deps): bump prettier from 2.8.0 to 3.3.3 by @​dependabot in https://github.com/softprops/action-gh-release/pull/480
• chore(deps): bump @​types/node from 20.14.9 to 20.14.11 by @​dependabot in https://github.com/softprops/action-gh-release/pull/483
• chore(deps): bump @​octokit/plugin-throttling from 9.3.0 to 9.3.1 by @​dependabot in https://github.com/softprops/action-gh-release/pull/484
• chore(deps): bump glob from 10.4.2 to 11.0.0 by @​dependabot in https://github.com/softprops/action-gh-release/pull/477
• refactor: write jest config in ts by @​chenrui333 in https://github.com/softprops/action-gh-release/pull/485
• chore(deps): bump @​actions/github from 5.1.1 to 6.0.0 by @​dependabot in https://github.com/softprops/action-gh-release/pull/470

Full Changelog: softprops/action-gh-release@v2...v2.0.8

v2.0.7

Compare Source

What's Changed

Bug fixes 🐛

• Fix missing update release body by @​FirelightFlagboy in https://github.com/softprops/action-gh-release/pull/365

Other Changes 🔄

• Bump @​octokit/plugin-retry from 4.0.3 to 7.1.1 by @​dependabot in https://github.com/softprops/action-gh-release/pull/443
• Bump typescript from 4.9.5 to 5.5.2 by @​dependabot in https://github.com/softprops/action-gh-release/pull/467
• Bump @​types/node from 20.14.6 to 20.14.8 by @​dependabot in https://github.com/softprops/action-gh-release/pull/469
• Bump @​types/node from 20.14.8 to 20.14.9 by @​dependabot in https://github.com/softprops/action-gh-release/pull/473
• Bump typescript from 5.5.2 to 5.5.3 by @​dependabot in https://github.com/softprops/action-gh-release/pull/472
• Bump ts-jest from 29.1.5 to 29.2.2 by @​dependabot in https://github.com/softprops/action-gh-release/pull/479
• docs: document that existing releases are updated by @​jvanbruegge in https://github.com/softprops/action-gh-release/pull/474

New Contributors

• @​jvanbruegge made their first contribution in https://github.com/softprops/action-gh-release/pull/474
• @​FirelightFlagboy made their first contribution in https://github.com/softprops/action-gh-release/pull/365

Full Changelog: softprops/action-gh-release@v2.0.6...v2.0.7

---

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.