chore(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
actions/checkout	action	patch	v4.1.4 -> v4.1.5
github/codeql-action	action	patch	v3.25.3 -> v3.25.4
goreleaser/goreleaser-action	action	minor	v5.0.0 -> v5.1.0
ossf/scorecard-action	action	patch	v2.3.1 -> v2.3.3

---

Release Notes

actions/checkout (actions/checkout)

v4.1.5

Compare Source

What's Changed

• Update NPM dependencies by @​cory-miller in https://github.com/actions/checkout/pull/1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in https://github.com/actions/checkout/pull/1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in https://github.com/actions/checkout/pull/1707

Full Changelog: actions/checkout@v4.1.4...v4.1.5

github/codeql-action (github/codeql-action)

v3.25.4

Compare Source

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v5.1.0

Compare Source

Important

This version changes the default behavior of latest to ~> v1.

The next major of this action (v6), will change this to ~> v2, and will be launched together with GoReleaser v2.

What's Changed

• docs: bump actions to latest major by @​crazy-max in https://github.com/goreleaser/goreleaser-action/pull/435
• chore(deps): bump docker/bake-action from 3 to 4 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/436
• chore(deps): bump codecov/codecov-action from 3 to 4 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/437
• chore(deps): bump actions/setup-go from 4 to 5 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/443
• chore(deps): bump actions/upload-artifact from 3 to 4 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/444
• Delete .kodiak.toml by @​vedantmgoyal9 in https://github.com/goreleaser/goreleaser-action/pull/446
• chore(deps): bump codecov/codecov-action from 3 to 4 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/448
• chore(deps): bump ip from 2.0.0 to 2.0.1 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/450
• Upgrade setup-go action version in README by @​kishaningithub in https://github.com/goreleaser/goreleaser-action/pull/455
• chore(deps): bump tar from 6.1.14 to 6.2.1 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/456
• chore: use corepack to install yarn by @​crazy-max in https://github.com/goreleaser/goreleaser-action/pull/458
• feat: lock this major version of the action to use '~> v1' as 'latest' by @​caarlos0 in https://github.com/goreleaser/goreleaser-action/pull/461
• chore(deps): bump semver from 7.6.0 to 7.6.2 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/462
• chore(deps): bump @​actions/http-client from 2.2.0 to 2.2.1 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/451

New Contributors

• @​vedantmgoyal9 made their first contribution in https://github.com/goreleaser/goreleaser-action/pull/446

Full Changelog: goreleaser/goreleaser-action@v5.0.0...v5.1.0

ossf/scorecard-action (ossf/scorecard-action)

v2.3.3

Compare Source

v2.3.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.