chore(deps): update dependency rhysd/actionlint to v1.7.8

[renovate]

This PR contains the following updates:

Package	Update	Change
rhysd/actionlint	patch	1.7.7 -> 1.7.8

---

Release Notes

rhysd/actionlint (rhysd/actionlint)

v1.7.8

Compare Source

• Support models permission in permissions section. (#​531, thanks @​muzimuzhi)
• Support job.check_run_id property. (#​576, thanks @​muzimuzhi for fixing the type at #​577)
• Support node24 runtime at using section in action metadata. (#​561, thanks @​salmanmkc)
• Add support for the following runner labels
  • macos-26 and macos-26-large (#​572, thanks @​muzimuzhi)
  • macos-15 (#​572, thanks @​muzimuzhi)
• Drop support for the following runner labels.
  • ubuntu-20.04 (#​534, thanks @​shogo82148)
  • windows-2019 (#​572, thanks @​muzimuzhi)
• Support deprecationMessage in action inputs. (#​540, thanks @​saansh45)
• Support windows-11-arm runner. (#​542, thanks @​trim21)
• Handle ubuntu-latest runner label as ubuntu-24.04 and macos-latest runner label as macos-15.
• Report mixing Intel Mac labels and Arm Mac labels as error.
• Add new types to issues and pull_request_target webhooks.
• Update the popular actions data set to the latest and add more actions to it (thanks @​sethvargo for fixing the go generate scripts)
  • actions/create-github-app-token
  • actions/attest-sbom
  • actions/ai-inference
  • peter-evans/create-or-update-comment
  • release-drafter/release-drafter
  • SamKirkland/FTP-Deploy-Action
• Fix the version value in actionlint -version can be empty.
• Fix outdated URL links in some error messages and documents.
• Homebrew formula in this repository is deprecated and Homebrew cask is newly added instead because GoReleaser no longer supports Homebrew formula update. Note that Homebrew's official actionlint formula is still maintained. Please read the documentation for more details.
• Drop support for Go 1.23 and earlier because they are no longer maintained officially. Go 1.24 and later are supported to build actionlint.
• Replace go-yaml/yaml@v3 package with yaml/go-yaml@v4 package. go-yaml/yaml was used for parsing workflow files however it was unmaintained. yaml/go-yaml is a successor of the library officially maintained by YAML organization. (#​575)
• Improve error messages on parsing workflow and action metadata files.

[Changes][v1.7.8]

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 13.07%. Comparing base (870f515) to head (28abed0).
⚠️ Report is 2 commits behind head on staging.

Additional details and impacted files

@@           Coverage Diff            @@
##           staging    #1045   +/-   ##
========================================
  Coverage    13.07%   13.07%           
========================================
  Files          450      450           
  Lines         3113     3113           
========================================
  Hits           407      407           
  Misses        2706     2706           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.