chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	patch	v3.3.1 -> v3.3.2
actions/checkout	action	major	v3.5.3 -> v4.1.1
actions/dependency-review-action	action	minor	v3.0.7 -> v3.1.0
github.com/golangci/golangci-lint	require	minor	v1.54.1 -> v1.55.1
github/codeql-action	action	minor	v2.21.3 -> v2.22.4
step-security/harden-runner	action	minor	v2.5.1 -> v2.6.0

---

Release Notes

actions/cache (actions/cache)

v3.3.2

Compare Source

What's Changed

• Fixed readme with new segment timeout values by @​kotewar in https://github.com/actions/cache/pull/1133
• Readme fixes by @​kotewar in https://github.com/actions/cache/pull/1134
• Updated description of the lookup-only input for main action by @​kotewar in https://github.com/actions/cache/pull/1130
• Change two new actions mention as quoted text by @​bishal-pdMSFT in https://github.com/actions/cache/pull/1131
• Update Cross-OS Caching tips by @​pdotl in https://github.com/actions/cache/pull/1122
• Bazel example (Take #​2️⃣) by @​vorburger in https://github.com/actions/cache/pull/1132
• Remove actions to add new PRs and issues to a project board by @​jorendorff in https://github.com/actions/cache/pull/1187
• Consume latest toolkit and fix dangling promise bug by @​chkimes in https://github.com/actions/cache/pull/1217
• Bump action version to 3.3.2 by @​bethanyj28 in https://github.com/actions/cache/pull/1236

New Contributors

• @​vorburger made their first contribution in https://github.com/actions/cache/pull/1132
• @​jorendorff made their first contribution in https://github.com/actions/cache/pull/1187
• @​chkimes made their first contribution in https://github.com/actions/cache/pull/1217
• @​bethanyj28 made their first contribution in https://github.com/actions/cache/pull/1236

Full Changelog: actions/cache@v3...v3.3.2

actions/checkout (actions/checkout)

v4.1.1

Compare Source

What's Changed

• Update CODEOWNERS to Launch team by @​joshmgross in https://github.com/actions/checkout/pull/1510
• Correct link to GitHub Docs by @​peterbe in https://github.com/actions/checkout/pull/1511
• Link to release page from what's new section by @​cory-miller in https://github.com/actions/checkout/pull/1514

New Contributors

• @​joshmgross made their first contribution in https://github.com/actions/checkout/pull/1510
• @​peterbe made their first contribution in https://github.com/actions/checkout/pull/1511

Full Changelog: actions/checkout@v4.1.0...v4.1.1

v4.1.0

Compare Source

• Add support for partial checkout filters

v4.0.0

Compare Source

• Support fetching without the --progress option
• Update to node20

v3.6.0

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

actions/dependency-review-action (actions/dependency-review-action)

v3.1.0: 3.1.0

Compare Source

What's New

Added support for dependencies submitted through the dependency submission API. This includes two new configuration parameters: retry-on-snapshot-warnings and retry-on-snapshot-warnings-timeout.

What's Changed

• Fix(docs): Correct action input name by @​oerd in https://github.com/actions/dependency-review-action/pull/551

New Contributors

• @​oerd made their first contribution in https://github.com/actions/dependency-review-action/pull/551

Full Changelog: actions/dependency-review-action@v3...v3.1.0

v3.0.8: 3.0.8

Compare Source

What's Changed

Added on-failure option to comment-summary-in-pr setting by @​sgmurphy in https://github.com/actions/dependency-review-action/pull/540

Previous configuration files using true/false for comment-summary-in-pr will be mapped automatically to the new values, but we encourage you to update to always/on-failure/never.

New Contributors

• @​sgmurphy made their first contribution in https://github.com/actions/dependency-review-action/pull/540

Full Changelog: actions/dependency-review-action@v3...v3.0.8

golangci/golangci-lint (github.com/golangci/golangci-lint)

v1.55.1

Compare Source

v1.55.0

Compare Source

1. new linters
   • gochecksumtype: https://github.com/alecthomas/go-check-sumtype
   • inamedparam: https://github.com/macabu/inamedparam
   • perfsprint: https://github.com/catenacyber/perfsprint
   • protogetter: https://github.com/ghostiam/protogetter
   • sloglint: https://github.com/go-simpler/sloglint
   • testifylint: https://github.com/Antonboom/testifylint
2. updated linters
   • bidichk: from 0.2.4 to 0.2.7
   • decorder: from 0.4.0 to 0.4.1
   • dupword: from 0.0.12 to 0.0.13
   • errchkjson: from 0.3.1 to 0.3.6
   • gci: from 0.11.0 to 0.11.2
   • ginkgolinter: from 0.13.5 to 0.14.0
   • go-errorlint: from 1.4.4 to 1.4.5
   • gocognit: from 1.0.7 to 1.1.0
   • goconst: from 1.5.1 to 1.6.0
   • godot: from 1.4.14 to 1.4.15
   • gofmt: update to HEAD
   • goimports: update to HEAD
   • gosec: from 2.17.0 to 2.18.1
   • gosmopolitan: from 1.2.1 to 1.2.2
   • govet: add appends analyzer
   • ireturn: from 0.2.0 to 0.2.1
   • protogetter: from 0.2.2 to 0.2.3
   • revgrep: from 745bb2f to v0.5.0
   • revive: from 1.3.2 to 1.3.4
   • sqlclosecheck: from 0.4.0 to 0.5.1
   • staticcheck: from 0.4.5 to 0.4.6
   • tagalign: from 1.3.2 to 1.3.3
   • unused: support passing in options
3. misc.
   • Add a pre-commit hook to check all files
4. Documentation
   • add source options to exclude-rules docs
   • gosec: add G602 to includes/excludes inside .golangci.reference.yml

v1.54.2

Compare Source

1. updated linters:
   • errname: from 0.1.10 to 0.1.12
   • ginkgolinter: from 0.13.3 to 0.13.5
   • go-errorlint: from 1.4.3 to 1.4.4
   • godot: from 1.4.11 to 1.4.14
   • gosec: from 2.16.0 to 2.17.0
   • musttag: from 0.7.1 to 0.7.2
   • nilnil: from 0.1.5 to 0.1.7
   • staticcheck: from 0.4.3 to 0.4.5
   • usestdlibvars: from 1.23.0 to 1.24.0
   • govet: add missing directive and slog passes

github/codeql-action (github/codeql-action)

v2.22.4

Compare Source

v2.22.3

Compare Source

v2.22.2

Compare Source

v2.22.1

Compare Source

v2.22.0

Compare Source

v2.21.9

Compare Source

v2.21.8

Compare Source

v2.21.7

Compare Source

v2.21.6

Compare Source

v2.21.5

Compare Source

v2.21.4

Compare Source

step-security/harden-runner (step-security/harden-runner)

v2.6.0

Compare Source

What's Changed

Release v2.6.0 by @​varunsh-coder in https://github.com/step-security/harden-runner/pull/346

This release adds support for self-hosted Virtual Machine runners (e.g. on EC2).

• Both ephemeral and persistent self-hosted VM runners are supported
• Documentation: https://docs.stepsecurity.io/harden-runner/how-tos/enable-runtime-security-vm

Full Changelog: step-security/harden-runner@v2...v2.6.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.