chore(deps): update github actions

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	major	v4.1.0 -> v5.0.0
actions/checkout	action	major	v4 -> v5
google-github-actions/auth	action	major	v2.1.3 -> v3.0.0
google-github-actions/auth	action	major	v2.1.10 -> v3.0.0
google-github-actions/auth	action	major	v2 -> v3

---

Release Notes

actions/checkout (actions/checkout)

v5.0.0

Compare Source

What's Changed

• Update actions checkout to use node 24 by @​salmanmkc in https://github.com/actions/checkout/pull/2226
• Prepare v5.0.0 release by @​salmanmkc in https://github.com/actions/checkout/pull/2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.0

Compare Source

What's Changed

• docs: update README.md by @​motss in https://github.com/actions/checkout/pull/1971
• Add internal repos for checking out multiple repositories by @​mouismail in https://github.com/actions/checkout/pull/1977
• Documentation update - add recommended permissions to Readme by @​benwells in https://github.com/actions/checkout/pull/2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in https://github.com/actions/checkout/pull/2044
• Update README.md by @​nebuk89 in https://github.com/actions/checkout/pull/2194
• Update CODEOWNERS for actions by @​TingluoHuang in https://github.com/actions/checkout/pull/2224
• Update package dependencies by @​salmanmkc in https://github.com/actions/checkout/pull/2236
• Prepare release v4.3.0 by @​salmanmkc in https://github.com/actions/checkout/pull/2237

New Contributors

• @​motss made their first contribution in https://github.com/actions/checkout/pull/1971
• @​mouismail made their first contribution in https://github.com/actions/checkout/pull/1977
• @​benwells made their first contribution in https://github.com/actions/checkout/pull/2043
• @​nebuk89 made their first contribution in https://github.com/actions/checkout/pull/2194
• @​salmanmkc made their first contribution in https://github.com/actions/checkout/pull/2236

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in #​1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in #​1180
• Dependency updates by @​dependabot- #​1777, #​1872

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in #​1739
• Bump actions/checkout from 3 to 4 by @​dependabot in #​1697
• Check out other refs/* by commit by @​orhantoy in #​1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in #​1776

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in #​1732

v4.1.5

Compare Source

• Update NPM dependencies by @​cory-miller in #​1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in #​1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in #​1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in #​1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in #​1707

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in #​1692
• Add dependabot config by @​cory-miller in #​1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in #​1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in #​1643

v4.1.3

Compare Source

• Check git version before attempting to disable sparse-checkout by @​jww3 in #​1656
• Add SSH user parameter by @​cory-miller in #​1685
• Update actions/checkout version in update-main-version.yml by @​jww3 in #​1650

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in #​1598

v4.1.1

Compare Source

• Correct link to GitHub Docs by @​peterbe in #​1511
• Link to release page from what's new section by @​cory-miller in #​1514

google-github-actions/auth (google-github-actions/auth)

v3.0.0

Compare Source

What's Changed

• Bump to Node 24 and remove old parameters by @​sethvargo in #​508
• Remove hacky script by @​sethvargo in #​509
• Release: v3.0.0 by @​google-github-actions-bot in #​510

Full Changelog: google-github-actions/auth@v2...v3.0.0

v2.1.13

Compare Source

What's Changed

• Update deps by @​sethvargo in #​506
• Release: v2.1.13 by @​google-github-actions-bot in #​507

Full Changelog: google-github-actions/auth@v2.1.12...v2.1.13

v2.1.12

Compare Source

What's Changed

• Add retries for getIDToken by @​sethvargo in #​502
• Release: v2.1.12 by @​google-github-actions-bot in #​503

Full Changelog: google-github-actions/auth@v2.1.11...v2.1.12

v2.1.11

Compare Source

What's Changed

• Update troubleshooting docs for Python by @​sethvargo in #​488
• Add linters by @​sethvargo in #​499
• Update deps by @​sethvargo in #​500
• Release: v2.1.11 by @​google-github-actions-bot in #​501

Full Changelog: google-github-actions/auth@v2.1.10...v2.1.11

v2.1.10

Compare Source

What's Changed

• Declare workflow permissions by @​sethvargo in #​482
• Document that the OIDC token expires in 5min by @​sethvargo in #​483
• Release: v2.1.10 by @​google-github-actions-bot in #​484

Full Changelog: google-github-actions/auth@v2.1.9...v2.1.10

v2.1.9

Compare Source

What's Changed

• Use our custom boolean parsing by @​sethvargo in #​478
• Update deps by @​sethvargo in #​479
• Release: v2.1.9 by @​google-github-actions-bot in #​480

Full Changelog: google-github-actions/auth@v2.1.8...v2.1.9

v2.1.8

Compare Source

What's Changed

• Update TROUBLESHOOTING.md by @​sethvargo in #​457
• fix: add runs-on to README.md example by @​lbarthon in #​460
• security: bump undici from 5.28.4 to 5.28.5 in the npm_and_yarn group by @​dependabot in #​463
• Update deps by @​sethvargo in #​466
• Release: v2.1.8 by @​google-github-actions-bot in #​467

New Contributors

• @​lbarthon made their first contribution in #​460

Full Changelog: google-github-actions/auth@v2...v2.1.8

v2.1.7

Compare Source

What's Changed

• fix: update relase workflows by @​verbanicm in #​452
• Release: v2.1.7 by @​google-github-actions-bot in #​453

Full Changelog: google-github-actions/auth@v2.1.6...v2.1.7

v2.1.6

Compare Source

What's Changed

• Recommend gcloud storage over gsutil by @​sethvargo in #​438
• Add missing log line by @​sethvargo in #​448
• Release: v2.1.6 by @​google-github-actions-bot in #​449

Full Changelog: google-github-actions/auth@v2.1.5...v2.1.6

v2.1.5

Compare Source

What's Changed

• Document ID Token lifetimes by @​sethvargo in #​433
• fix !project_id error message typo by @​seth-acuitymd in #​435
• Update deps by @​sethvargo in #​436
• Release: v2.1.5 by @​google-github-actions-bot in #​437

New Contributors

• @​seth-acuitymd made their first contribution in #​435

Full Changelog: google-github-actions/auth@v2.1.4...v2.1.5

v2.1.4

Compare Source

What's Changed

• security: bump braces from 3.0.2 to 3.0.3 in the npm_and_yarn group by @​dependabot in #​420
• Update spelling and workflow versions by @​sethvargo in #​422
• Update deps by @​sethvargo in #​430
• Release: v2.1.4 by @​google-github-actions-bot in #​431

Full Changelog: google-github-actions/auth@v2.1.3...v2.1.4

---

Configuration

📅 Schedule: Branch creation - "after 11am every 3 weeks on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[gemini-code-assist]

Note

Gemini is unable to generate a summary for this pull request due to the file types involved not being currently supported.

[dpebot]

/gcbrun

[briandorsey]

LGTM

[briandorsey]

Needs additional review.

Several tests failing with:

Error: google-github-actions/auth failed with: gitHub Actions did not inject $ACTIONS_ID_TOKEN_REQUEST_TOKEN or $ACTIONS_ID_TOKEN_REQUEST_URL into this job. This most likely means the GitHub Actions workflow permissions are incorrect, or this job is being run from a fork. 

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[briandorsey]

After review, I think these tests are only failing because this PR is on a fork, and tokens are not created in that case.