chore(deps): Update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/cache	action	minor	v6.0.0 → v6.1.0
anthropics/claude-code-action	action	patch	v1.0.158 → v1.0.161	v1.0.164 (+2)
anthropics/claude-code-action (changelog)	action	digest	a92e7c7 → 01872cc
docker/build-push-action (changelog)	action	digest	f9f3042 → 53b7df9
docker/setup-buildx-action (changelog)	action	digest	d7f5e7f → bb05f3f
github/codeql-action (changelog)	action	digest	8aad20d → 54f647b
golangci/golangci-lint-action (changelog)	action	digest	82606bf → ba0d7d2
goreleaser/goreleaser-action	action	patch	v7.2.2 → v7.2.3
trufflesecurity/trufflehog	action	patch	v3.95.6 → v3.95.7	v3.95.8

---

Release Notes

actions/cache (actions/cache)

v6.1.0

Compare Source

What's Changed

• Bump @​actions/cache to v6.1.0 - handle read-only cache access by @​jasongin in #​1768

Full Changelog: actions/cache@v6...v6.1.0

anthropics/claude-code-action (anthropics/claude-code-action)

v1.0.161

Compare Source

Full Changelog: anthropics/claude-code-action@v1...v1.0.161

v1.0.160

Compare Source

v1.0.159

Compare Source

What's Changed

• fix: bound app token revocation cleanup by @​tarunag10 in #​1437

New Contributors

• @​tarunag10 made their first contribution in #​1437

Full Changelog: anthropics/claude-code-action@v1...v1.0.159

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v7.2.3

Compare Source

What's Changed

• ci(deps): bump the actions group with 3 updates by @​dependabot[bot] in #​563
• chore(deps): bump undici from 6.24.1 to 6.27.0 by @​dependabot[bot] in #​565
• build: regenerate dist after undici 6.27.0 bump by @​caarlos0 in #​567
• ci: auto-rebuild dist on dependabot PRs by @​caarlos0 in #​568
• ci: use a GitHub App token to rebuild dist on dependabot PRs by @​caarlos0 in #​569

Full Changelog: goreleaser/goreleaser-action@v7.2.2...v7.2.3

trufflesecurity/trufflehog (trufflesecurity/trufflehog)

v3.95.7

Compare Source

What's Changed

• fix(sources/filesystem): order resume comparison by path component by @​genisis0x in #​5041
• test(handlers): point APK test fixture at trufflehog-test-assets by @​amanfcp in #​5053
• fixed regex typo that was causing conf uuid's to be surfaced as non-live atlassian secrets. by @​jordanTunstill in #​5029
• Fix GitHub App cross-org member enumeration using per-installation tokens by @​dustin-decker in #​4774
• fix: add git worktree support in PrepareRepo by @​andoniaf in #​4690
• [INS-406] Braintrust detector by @​MuneebUllahKhan222 in #​4826
• huggingface: add bucket scanning by @​julien-c in #​5017
• Skip reverification results during deduplication by @​mcastorina in #​5069
• chore(renovate): bump shared config to v1.0.3 by @​bryanbeverly in #​5044
• Add scan_all_installations option for multi-org GitHub App scanning by @​dustin-decker in #​4775
• Expose SecretParts in the JSON output by @​bradlarsen in #​5073
• [INS-497] Add Pganalyze Read Key Detector by @​MuneebUllahKhan222 in #​4993
• [INS-197] Add redhatpyxis api key detector by @​MuneebUllahKhan222 in #​4995
• [INS-407] Fixed AWS detector producing non deterministic output by @​MuneebUllahKhan222 in #​4836

New Contributors

• @​genisis0x made their first contribution in #​5041
• @​andoniaf made their first contribution in #​4690
• @​julien-c made their first contribution in #​5017

Full Changelog: trufflesecurity/trufflehog@v3.95.6...v3.95.7

---

Configuration

📅 Schedule: (in timezone Europe/Zurich)

• Branch creation
  • "before 6am"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.