deps: Update Github Actions

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-go	action	minor	v5.0.2 -> v5.5.0
docker/setup-buildx-action	action	minor	v3.10.0 -> v3.11.1
github/codeql-action	action	minor	v3.28.16 -> v3.29.0
google-github-actions/get-secretmanager-secrets	action	minor	v2.1.3 -> v2.2.3
ossf/scorecard-action	action	patch	v2.4.0 -> v2.4.2

---

Release Notes

actions/setup-go (actions/setup-go)

v5.5.0

Compare Source

What's Changed

Bug fixes:

• Update self-hosted environment validation by @​priyagupta108 in https://github.com/actions/setup-go/pull/556
• Add manifest validation and improve error handling by @​priyagupta108 in https://github.com/actions/setup-go/pull/586
• Update template link by @​jsoref in https://github.com/actions/setup-go/pull/527

Dependency updates:

• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​aparnajyothi-y in https://github.com/actions/setup-go/pull/574
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in https://github.com/actions/setup-go/pull/573
• Upgrade ts-jest from 29.1.2 to 29.3.2 by @​dependabot in https://github.com/actions/setup-go/pull/582
• Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @​dependabot in https://github.com/actions/setup-go/pull/537

New Contributors

• @​jsoref made their first contribution in https://github.com/actions/setup-go/pull/527

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

Compare Source

What's Changed

Dependency updates :

• Upgrade semver from 7.6.0 to 7.6.3 by @​dependabot in https://github.com/actions/setup-go/pull/535
• Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @​dependabot in https://github.com/actions/setup-go/pull/536
• Upgrade @​action/cache from 4.0.0 to 4.0.2 by @​aparnajyothi-y in https://github.com/actions/setup-go/pull/568
• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in https://github.com/actions/setup-go/pull/541

New Contributors

• @​aparnajyothi-y made their first contribution in https://github.com/actions/setup-go/pull/568

Full Changelog: actions/setup-go@v5...v5.4.0

v5.3.0

Compare Source

What's Changed

• Use the new cache service: upgrade @actions/cache to ^4.0.0 by @​Link- in https://github.com/actions/setup-go/pull/531
• Configure Dependabot settings by @​HarithaVattikuti in https://github.com/actions/setup-go/pull/530
• Document update - permission section by @​HarithaVattikuti in https://github.com/actions/setup-go/pull/533
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in https://github.com/actions/setup-go/pull/534

New Contributors

• @​Link- made their first contribution in https://github.com/actions/setup-go/pull/531

Full Changelog: actions/setup-go@v5...v5.3.0

v5.2.0

Compare Source

What's Changed

• Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in https://github.com/actions/setup-go/pull/496

New Contributors

• @​Shegox made their first contribution in https://github.com/actions/setup-go/pull/496

Full Changelog: actions/setup-go@v5...v5.2.0

v5.1.0

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/setup-go/pull/500
• Upgrade IA Publish by @​Jcambass in https://github.com/actions/setup-go/pull/502
• Add architecture to cache key by @​Zxilly in https://github.com/actions/setup-go/pull/493
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.
• Enhance workflows and Upgrade micromatch Dependency by @​priyagupta108 in https://github.com/actions/setup-go/pull/510

Bug Fixes

• Revise isGhes logic by @​jww3 in https://github.com/actions/setup-go/pull/511

New Contributors

• @​Zxilly made their first contribution in https://github.com/actions/setup-go/pull/493
• @​Jcambass made their first contribution in https://github.com/actions/setup-go/pull/500
• @​jww3 made their first contribution in https://github.com/actions/setup-go/pull/511
• @​priyagupta108 made their first contribution in https://github.com/actions/setup-go/pull/510

Full Changelog: actions/setup-go@v5...v5.1.0

docker/setup-buildx-action (docker/setup-buildx-action)

v3.11.1

Compare Source

• Fix keep-state not being respected by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Compare Source

• Keep BuildKit state support by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/427
• Remove aliases created when installing by default by @​hashhar in https://github.com/docker/setup-buildx-action/pull/139
• Bump @​docker/actions-toolkit from 0.56.0 to 0.62.1 in https://github.com/docker/setup-buildx-action/pull/422 https://github.com/docker/setup-buildx-action/pull/425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

github/codeql-action (github/codeql-action)

v3.29.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.0 - 11 Jun 2025

• Update default CodeQL bundle version to 2.22.0. #​2925
• Bump minimum CodeQL bundle version to 2.16.6. #​2912

See the full CHANGELOG.md for more information.

v3.28.19

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.19 - 03 Jun 2025

• The CodeQL Action no longer includes its own copy of the extractor for the actions language, which is currently in public preview.
  The actions extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled the actions language and you have pinned
  your tools: property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disable
  actions analysis.
• Update default CodeQL bundle version to 2.21.4. #​2910

See the full CHANGELOG.md for more information.

v3.28.18

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.18 - 16 May 2025

• Update default CodeQL bundle version to 2.21.3. #​2893
• Skip validating SARIF produced by CodeQL for improved performance. #​2894
• The number of threads and amount of RAM used by CodeQL can now be set via the CODEQL_THREADS and CODEQL_RAM runner environment variables. If set, these environment variables override the threads and ram inputs respectively. #​2891

See the full CHANGELOG.md for more information.

v3.28.17

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.17 - 02 May 2025

• Update default CodeQL bundle version to 2.21.2. #​2872

See the full CHANGELOG.md for more information.

google-github-actions/get-secretmanager-secrets (google-github-actions/get-secretmanager-secrets)

v2.2.3

Compare Source

What's Changed

• security: bump undici from 5.28.4 to 5.28.5 in the npm_and_yarn group by @​dependabot in https://github.com/google-github-actions/get-secretmanager-secrets/pull/312
• Update deps by @​sethvargo in https://github.com/google-github-actions/get-secretmanager-secrets/pull/313
• Release: v2.2.3 by @​google-github-actions-bot in https://github.com/google-github-actions/get-secretmanager-secrets/pull/314

Full Changelog: google-github-actions/get-secretmanager-secrets@v2...v2.2.3

v2.2.2

Compare Source

What's Changed

• Document that secrets can be CSV by @​sethvargo in https://github.com/google-github-actions/get-secretmanager-secrets/pull/307
• fix: update relase workflows by @​verbanicm in https://github.com/google-github-actions/get-secretmanager-secrets/pull/308
• Release: v2.2.2 by @​google-github-actions-bot in https://github.com/google-github-actions/get-secretmanager-secrets/pull/309

Full Changelog: google-github-actions/get-secretmanager-secrets@v2.2.1...v2.2.2

v2.2.1

Compare Source

What's Changed

• Trim whitespace around secret references by @​sethvargo in https://github.com/google-github-actions/get-secretmanager-secrets/pull/304
• Release: v2.2.1 by @​google-github-actions-bot in https://github.com/google-github-actions/get-secretmanager-secrets/pull/305

Full Changelog: google-github-actions/get-secretmanager-secrets@v2.2.0...v2.2.1

v2.2.0

Compare Source

What's Changed

• Add support for universes and regional secrets by @​sethvargo in https://github.com/google-github-actions/get-secretmanager-secrets/pull/301
• Release: v2.2.0 by @​google-github-actions-bot in https://github.com/google-github-actions/get-secretmanager-secrets/pull/302

Full Changelog: google-github-actions/get-secretmanager-secrets@v2.1.4...v2.2.0

v2.1.4

Compare Source

What's Changed

• Update docs by @​sethvargo in https://github.com/google-github-actions/get-secretmanager-secrets/pull/296
• Update deps by @​sethvargo in https://github.com/google-github-actions/get-secretmanager-secrets/pull/298
• Release: v2.1.4 by @​google-github-actions-bot in https://github.com/google-github-actions/get-secretmanager-secrets/pull/299

Full Changelog: google-github-actions/get-secretmanager-secrets@v2.1.3...v2.1.4

ossf/scorecard-action (ossf/scorecard-action)

v2.4.2

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.

Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2

v2.4.1

Compare Source

What's Changed

• This update bumps the Scorecard version to the v5.1.1 release. For a complete list of changes, please refer to the v5.1.0 and v5.1.1 release notes.
• Publishing results now uses half the API quota as before. The exact savings depends on the repository in question.
  • use Scorecard library entrypoint instead of Cobra hooking by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1423
• Some errors were made into annotations to make them more visible
  • Make default branch error more prominent by @​jsoref in https://github.com/ossf/scorecard-action/pull/1459
• There is now an optional file_mode input which controls how repository files are fetched from GitHub. The default is archive, but git produces the most accurate results for repositories with .gitattributes files at the cost of analysis speed.
  • add input for specifying --file-mode by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1509
• The underlying container for the action is now hosted on GitHub Container Registry. There should be no functional changes.
  • 🌱 publish docker images to GitHub Container Registry by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1453

Docs

• Installation docs update by @​JeremiahAHoward in https://github.com/ossf/scorecard-action/pull/1416

New Contributors

• @​JeremiahAHoward made their first contribution in https://github.com/ossf/scorecard-action/pull/1416
• @​jsoref made their first contribution in https://github.com/ossf/scorecard-action/pull/1459
  Full Changelog: ossf/scorecard-action@v2.4.0...v2.4.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.