Bump the github-actions group across 1 directory with 3 updates

[dependabot[bot]]

Bumps the github-actions group with 3 updates in the / directory: actions/checkout, github/codeql-action and golangci/golangci-lint-action.

Updates actions/checkout from 4.1.2 to 4.1.4

Release notes

Sourced from actions/checkout's releases.

v4.1.4

What's Changed

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in actions/checkout#1692
• Add dependabot config by @​cory-miller in actions/checkout#1688
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in actions/checkout#1643
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in actions/checkout#1693

Full Changelog: https://github.com/actions/checkout/compare/v4.1.3...v4.1.4

v4.1.3

What's Changed

• Update actions/checkout version in update-main-version.yml by @​jww3 in actions/checkout#1650
• Check git version before attempting to disable sparse-checkout by @​jww3 in actions/checkout#1656
• Add SSH user parameter by @​cory-miller in actions/checkout#1685

Full Changelog: https://github.com/actions/checkout/compare/v4.1.2...v4.1.3

Changelog

Sourced from actions/checkout's changelog.

v4.1.4

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in actions/checkout#1692
• Add dependabot config by @​cory-miller in actions/checkout#1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in actions/checkout#1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in actions/checkout#1643

v4.1.3

• Check git version before attempting to disable sparse-checkout by @​jww3 in actions/checkout#1656
• Add SSH user parameter by @​cory-miller in actions/checkout#1685
• Update actions/checkout version in update-main-version.yml by @​jww3 in actions/checkout#1650

Commits

• 0ad4b8f Prep Release v4.1.4 (#1704)
• 43045ae Disable extensions.worktreeConfig when disabling sparse-checkout (#1692)
• 37b0821 Bump the minor-actions-dependencies group with 2 updates (#1693)
• 9839dc1 Add dependabot config (#1688)
• 9b4c13b Bump word-wrap from 1.2.3 to 1.2.5 (#1643)
• 1d96c77 Add SSH user parameter (#1685)
• cd7d8d6 Check git version before attempting to disable sparse-checkout (#1656)
• 8410ad0 Update actions/checkout version in update-main-version.yml (#1650)
• See full diff in compare view

Updates github/codeql-action from 3.24.10 to 3.25.3

Changelog

Sourced from github/codeql-action's changelog.

3.25.3 - 25 Apr 2024

• Update default CodeQL bundle version to 2.17.1. #2247
• Workflows running on macos-latest using CodeQL CLI versions before v2.15.1 will need to either upgrade their CLI version to v2.15.1 or newer, or change the platform to an Intel MacOS runner, such as macos-12. ARM machines with SIP disabled, including the newest macos-latest image, are unsupported for CLI versions before 2.15.1. #2261

3.25.2 - 22 Apr 2024

No user facing changes.

3.25.1 - 17 Apr 2024

• We are rolling out a feature in April/May 2024 that improves the reliability and performance of analyzing code when analyzing a compiled language with the autobuild build mode. #2235
• Fix a bug where the init Action would fail if --overwrite was specified in CODEQL_ACTION_EXTRA_OPTIONS. #2245

3.25.0 - 15 Apr 2024

• The deprecated feature for extracting dependencies for a Python analysis has been removed. #2224

  As a result, the following inputs and environment variables are now ignored:

  • The setup-python-dependencies input to the init Action
  • The CODEQL_ACTION_DISABLE_PYTHON_DEPENDENCY_INSTALLATION environment variable

  We recommend removing any references to these from your workflows. For more information, see the release notes for CodeQL Action v3.23.0 and v2.23.0.

• Automatically overwrite an existing database if found on the filesystem. #2229

• Bump the minimum CodeQL bundle version to 2.12.6. #2232

• A more relevant log message and a diagnostic are now emitted when the file program is not installed on a Linux runner, but is required for Go tracing to succeed. #2234

Commits

• d39d31e Merge pull request #2262 from github/update-v3.25.3-ac2f82a1f
• a727825 Move changenote to most recent section
• 1efa859 Update changelog for v3.25.3
• ac2f82a Log warning if SIP is disabled and CLI version is < 2.15.1 (#2261)
• 0ad7791 Merge pull request #2247 from github/update-bundle/codeql-bundle-v2.17.1
• 79d9ee7 Merge branch 'main' into update-bundle/codeql-bundle-v2.17.1
• dbf2b17 Merge pull request #2255 from github/mergeback/v3.25.2-to-main-8f596b4a
• ff6a3c4 Update checked-in dependencies
• 619dc0c Update changelog and version after v3.25.2
• 8f596b4 Merge pull request #2254 from github/update-v3.25.2-4909c1ffb
• Additional commits viewable in compare view

Updates golangci/golangci-lint-action from 4.0.0 to 5.1.0

Release notes

Sourced from golangci/golangci-lint-action's releases.

v5.1.0

What's Changed

Changes

• feat: support for pull and merge_group events with the option only-new-issues by @​ldez in golangci/golangci-lint-action#1029

Dependencies

• build(deps-dev): bump @​typescript-eslint/parser from 7.7.0 to 7.7.1 by @​dependabot in golangci/golangci-lint-action#1027
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.7.0 to 7.7.1 by @​dependabot in golangci/golangci-lint-action#1028

Full Changelog: https://github.com/golangci/golangci-lint-action/compare/v5.0.0...v5.1.0

v5.0.0

What's Changed

skip-pkg-cache and skip-build-cache have been removed because the cache related to Go itself is already handled by actions/setup-go.

Changes

• feat: add support for pull_request_target and only-new-issues by @​kovetskiy in golangci/golangci-lint-action#506
• feat: add option to not save cache by @​navijation in golangci/golangci-lint-action#851
• feat: remove Go cache management by @​ldez in golangci/golangci-lint-action#1024

New Contributors

• @​kovetskiy made their first contribution in golangci/golangci-lint-action#506
• @​navijation made their first contribution in golangci/golangci-lint-action#851

Full Changelog: https://github.com/golangci/golangci-lint-action/compare/v4.0.1...v5.0.0

v4.0.1

What's Changed

Documentation

• docs: update the version of the action used in the README example by @​178inaba in golangci/golangci-lint-action#977

Dependencies

• build(deps): bump @​types/semver from 7.5.6 to 7.5.7 by @​dependabot in golangci/golangci-lint-action#969
• build(deps-dev): bump @​typescript-eslint/parser from 6.20.0 to 6.21.0 by @​dependabot in golangci/golangci-lint-action#970
• build(deps-dev): bump eslint-plugin-simple-import-sort from 10.0.0 to 12.0.0 by @​dependabot in golangci/golangci-lint-action#971
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 6.20.0 to 6.21.0 by @​dependabot in golangci/golangci-lint-action#973
• build(deps): bump @​types/node from 20.11.16 to 20.11.17 by @​dependabot in golangci/golangci-lint-action#972
• build(deps): bump @​types/node from 20.11.17 to 20.11.19 by @​dependabot in golangci/golangci-lint-action#979
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 6.21.0 to 7.0.0 by @​dependabot in golangci/golangci-lint-action#980
• build(deps): bump undici from 5.26.3 to 5.28.3 by @​dependabot in golangci/golangci-lint-action#976
• build(deps): bump @​types/node from 20.11.19 to 20.11.20 by @​dependabot in golangci/golangci-lint-action#985
• build(deps): bump @​types/semver from 7.5.7 to 7.5.8 by @​dependabot in golangci/golangci-lint-action#986
• build(deps-dev): bump eslint from 8.56.0 to 8.57.0 by @​dependabot in golangci/golangci-lint-action#987
• build(deps): bump tmp from 0.2.1 to 0.2.3 by @​dependabot in golangci/golangci-lint-action#989

... (truncated)

Commits

• 9d1e062 feat: only new issues enhancements (#1029)
• 692c9c9 build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.7.0 to 7.7.1 (#...
• ef6d5d0 build(deps-dev): bump @​typescript-eslint/parser from 7.7.0 to 7.7.1 (#1027)
• d149ece docs: update readme
• f89fd48 docs: update readme
• 47ef1b2 docs: update readme
• 7c0f80c docs: update readme
• 3adb6d0 docs: update readme
• 03a8ce6 docs: update readme
• 82d40c2 feat: remove Go cache management (#1024)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

[dependabot[bot]]

Looks like these dependencies are updatable in another way, so this is no longer needed.