build(deps): update other-major

Author: renovate[bot]

.github/workflows/ci.yaml

@@ -85,7 +85,7 @@ jobs:
       - id: sonarcloud
         if: ${{ !github.event.inputs.skip_sonarcloud }}
         name: SonarCloud Scan
-        uses: SonarSource/sonarqube-scan-action@bfd4e558cda28cda6b5defafb9232d191be8c203 # v4
+        uses: SonarSource/sonarqube-scan-action@0303d6b62e310685c0e34d0b9cde218036885c4d # v5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/pr.yaml

@@ -57,7 +57,7 @@ jobs:
       - id: sonarcloud
         if: ${{ env.SONAR_TOKEN && !github.event.inputs.skip_sonarcloud }}
         name: SonarCloud Scan
-        uses: sonarsource/sonarcloud-github-action@02ef91109b2d589e757aefcfb2854c2783fd7b19 # v4
+        uses: sonarsource/sonarcloud-github-action@ffc3010689be73b8e5ae0c57ce35968afd7909e8 # v5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

devbox.json

@@ -4,10 +4,10 @@
     "gojq@0",
     "gh@2",
     "gettext@0",
-    "gomplate@3",
+    "gomplate@4.2.0",
     "google-clasp@2",
-    "nodejs@22",
-    "renovate@latest",
+    "nodejs@23.8.0",
+    "renovate@39.153.1",
     "antlr@4",
     "qpdf@11",
     "wkhtmltopdf-bin@0"