chore(deps): update workflows

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	patch	v4.2.2 -> v4.2.3
actions/download-artifact	action	minor	v4.1.9 -> v4.2.1
actions/setup-go	action	minor	v5.3.0 -> v5.4.0
actions/setup-node	action	minor	v4.2.0 -> v4.3.0
actions/setup-python	action	minor	v5.4.0 -> v5.5.0
actions/upload-artifact	action	patch	v4.6.1 -> v4.6.2
github/codeql-action	action	patch	v3.28.11 -> v3.28.13
golangci/golangci-lint-action	action	patch	v6.5.1 -> v6.5.2
goreleaser/goreleaser-action	action	minor	v6.2.1 -> v6.3.0
r-lib/actions	action	patch	v2.11.2 -> v2.11.3
ruby/setup-ruby	action	minor	v1.224.0 -> v1.229.0

---

Release Notes

actions/cache (actions/cache)

v4.2.3

Compare Source

What's Changed

• Update to use @​actions/cache 4.0.3 package & prepare for new release by @​salmanmkc in https://github.com/actions/cache/pull/1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

• @​salmanmkc made their first contribution in https://github.com/actions/cache/pull/1577

Full Changelog: actions/cache@v4.2.2...v4.2.3

actions/download-artifact (actions/download-artifact)

v4.2.1

Compare Source

What's Changed

• Add unit tests by @​GhadimiR in https://github.com/actions/download-artifact/pull/392
• Fix bug introduced in 4.2.0 by @​GhadimiR in https://github.com/actions/download-artifact/pull/391

Full Changelog: actions/download-artifact@v4.2.0...v4.2.1

v4.2.0

Compare Source

What's Changed

• Update README.md by @​lkfortuna in https://github.com/actions/download-artifact/pull/384
• Bump artifact version, do digest check by @​GhadimiR in https://github.com/actions/download-artifact/pull/383

New Contributors

• @​lkfortuna made their first contribution in https://github.com/actions/download-artifact/pull/384
• @​GhadimiR made their first contribution in https://github.com/actions/download-artifact/pull/383

Full Changelog: actions/download-artifact@v4.1.9...v4.2.0

actions/setup-go (actions/setup-go)

v5.4.0

Compare Source

What's Changed

Dependency updates :

• Upgrade semver from 7.6.0 to 7.6.3 by @​dependabot in https://github.com/actions/setup-go/pull/535
• Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @​dependabot in https://github.com/actions/setup-go/pull/536
• Upgrade @​action/cache from 4.0.0 to 4.0.2 by @​aparnajyothi-y in https://github.com/actions/setup-go/pull/568
• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in https://github.com/actions/setup-go/pull/541

New Contributors

• @​aparnajyothi-y made their first contribution in https://github.com/actions/setup-go/pull/568

Full Changelog: actions/setup-go@v5...v5.4.0

actions/setup-node (actions/setup-node)

v4.3.0

Compare Source

actions/setup-python (actions/setup-python)

v5.5.0

Compare Source

What's Changed

Enhancements:

• Support free threaded Python versions like '3.13t' by @​colesbury in https://github.com/actions/setup-python/pull/973
• Enhance Workflows: Include ubuntu-arm runners, Add e2e Testing for free threaded and Upgrade @​action/cache from 4.0.0 to 4.0.3 by @​priya-kinthali in https://github.com/actions/setup-python/pull/1056
• Add support for .tool-versions file in setup-python by @​mahabaleshwars in https://github.com/actions/setup-python/pull/1043

Bug fixes:

• Fix architecture for pypy on Linux ARM64 by @​mayeut in https://github.com/actions/setup-python/pull/1011
  This update maps arm64 to aarch64 for Linux ARM64 PyPy installations.

Dependency updates:

• Upgrade @​vercel/ncc from 0.38.1 to 0.38.3 by @​dependabot in https://github.com/actions/setup-python/pull/1016
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in https://github.com/actions/setup-python/pull/1015

New Contributors

• @​colesbury made their first contribution in https://github.com/actions/setup-python/pull/973
• @​mahabaleshwars made their first contribution in https://github.com/actions/setup-python/pull/1043

Full Changelog: actions/setup-python@v5...v5.5.0

actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed

• Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in https://github.com/actions/upload-artifact/pull/685

New Contributors

• @​salmanmkc made their first contribution in https://github.com/actions/upload-artifact/pull/685

Full Changelog: actions/upload-artifact@v4...v4.6.2

github/codeql-action (github/codeql-action)

v3.28.13

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.13 - 24 Mar 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.12

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025

• Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
• Update default CodeQL bundle version to 2.20.7. #​2810

See the full CHANGELOG.md for more information.

golangci/golangci-lint-action (golangci/golangci-lint-action)

v6.5.2

Compare Source

What's Changed

Changes

• fix: update max version by @​ldez in https://github.com/golangci/golangci-lint-action/pull/1201

Dependencies

• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot in https://github.com/golangci/golangci-lint-action/pull/1199

Full Changelog: golangci/golangci-lint-action@v6.5.1...v6.5.2

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v6.3.0

Compare Source

• Bump undici from 5.28.3 to 5.28.5 in https://github.com/goreleaser/goreleaser-action/pull/488

Full Changelog: goreleaser/goreleaser-action@v6.2.1...v6.3.0

r-lib/actions (r-lib/actions)

v2.11.3

Compare Source

ruby/setup-ruby (ruby/setup-ruby)

v1.229.0

Compare Source

What's Changed

• Update CRuby releases on Windows by @​ruby-builder-bot in https://github.com/ruby/setup-ruby/pull/727

Full Changelog: ruby/setup-ruby@v1.228.0...v1.229.0

v1.228.0

Compare Source

What's Changed

• Add ruby-3.1.7,ruby-3.2.8 by @​ruby-builder-bot in https://github.com/ruby/setup-ruby/pull/726

Full Changelog: ruby/setup-ruby@v1.227.0...v1.228.0

v1.227.0

Compare Source

What's Changed

• Add truffleruby-24.2.0,truffleruby+graalvm-24.2.0 by @​ruby-builder-bot in https://github.com/ruby/setup-ruby/pull/724

Full Changelog: ruby/setup-ruby@v1.226.0...v1.227.0

v1.226.0

Compare Source

What's Changed

• Use $JAVA_HOME/bin/java for the check by @​eregon in https://github.com/ruby/setup-ruby/pull/723

Full Changelog: ruby/setup-ruby@v1.225.0...v1.226.0

v1.225.0

Compare Source

What's Changed

• Switch JAVA_HOME to 21 for JRuby by @​headius in https://github.com/ruby/setup-ruby/pull/721
• Handle exec error by @​headius in https://github.com/ruby/setup-ruby/pull/722

Full Changelog: ruby/setup-ruby@v1.224.0...v1.225.0

---

Configuration

📅 Schedule: Branch creation - "before 6am on monday" in timezone Pacific/Auckland, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.