chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aquasecurity/trivy-action	action	minor	0.32.0 -> 0.33.1
bcgov/action-builder-ghcr	action	minor	v4.0.0 -> 4.1.1
bcgov/action-test-and-analyse	action	minor	v1.3.0 -> v1.4.0
mcr.microsoft.com/playwright	container	minor	v1.54.1-noble -> v1.56.1-noble
zaproxy/action-full-scan	action	minor	v0.12.0 -> v0.13.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

aquasecurity/trivy-action (aquasecurity/trivy-action)

v0.33.1

Compare Source

What's Changed

• Update setup-trivy action to version v0.2.4 by @​martincostello in #​486

Full Changelog: aquasecurity/trivy-action@0.33.0...0.33.1

v0.33.0

Compare Source

What's Changed

• Update dependencies in README by @​ibakshay in #​378
• doc: correct sbom fs scan by @​yxtay in #​458
• Pin actions/cache by SHA by @​martincostello in #​480
• chore(ci): Add oras to correctly setup sync jobs by @​simar7 in #​482
• chore(deps): Update trivy to v0.65.0 by @​aqua-bot in #​481

New Contributors

• @​ibakshay made their first contribution in #​378
• @​yxtay made their first contribution in #​458
• @​martincostello made their first contribution in #​480

Full Changelog: aquasecurity/trivy-action@0.32.0...0.33.0

bcgov/action-builder-ghcr (bcgov/action-builder-ghcr)

v4.1.1

Compare Source

What's Changed

• chore(deps): update actions/checkout action to v5 by @​renovate[bot] in #​103
• chore(deps): update actions/attest action to v3 by @​renovate[bot] in #​105
• fix: cleanup by @​DerekRoberts in #​108
• fix: update syft packages to syft scan syntax (deprecation) by @​DerekRoberts in #​109
• fix: handle and notify on SBOM failure by @​DerekRoberts in #​111

Full Changelog: bcgov/action-builder-ghcr@v4.1.0...4.1.1

v4.1.0

Compare Source

Docker Build Secrets Release!

What's Changed

• feat: shorten Docker image paths (repo=package) by @​DerekRoberts in #​93
• chore(deps): update actions/attest action to v2.4.0 by @​renovate[bot] in #​96
• chore(ci): drop keep_versions from workflows (expected deprecation) by @​DerekRoberts in #​100
• feat: Support secrets via docker/build-push-action by @​dmarcantonio in #​102

New Contributors

• @​dmarcantonio made their first contribution in bcgov-nr#102

Full Changelog: bcgov/action-builder-ghcr@v4.0.0...v4.1.0

bcgov/action-test-and-analyse (bcgov/action-test-and-analyse)

v1.4.0

Compare Source

What's Changed

• chore(deps): update actions/setup-node action to v5 by @​renovate[bot] in #​77
• feat: add triggered output to action.yml by @​DerekRoberts in #​78
• feat: enhanced input validation and error handling by @​DerekRoberts in #​79
• docs: add outputs section and improve versioning practices by @​DerekRoberts in #​80
• refactor: remove out-of-scope error handling and workspace cleanup cruft by @​DerekRoberts in #​81

Full Changelog: bcgov/action-test-and-analyse@v1.3.1...v1.4.0

v1.3.1

Compare Source

What's Changed

• chore(deps): update sonarsource/sonarqube-scan-action action to v5.2.0 by @​renovate[bot] in #​67
• chore(deps): pin dependencies by @​renovate[bot] in #​68
• chore(ci): fix pr-open secret handling by @​DerekRoberts in #​71
• chore(deps): update sonarsource/sonarqube-scan-action action to v5.3.0 by @​renovate[bot] in #​70
• chore(deps): update actions/checkout digest to 08eba0b by @​renovate[bot] in #​72
• chore(ci): drop pins for allowlisted actions by @​DerekRoberts in #​73
• chore(deps): update actions/checkout action to v5 by @​renovate[bot] in #​74
• Bump SonarSource/sonarqube-scan-action to v5.3.1 by @​ty2k in #​76

New Contributors

• @​ty2k made their first contribution in #​76

Full Changelog: bcgov/action-test-and-analyse@v1.3.0...v1.3.1

zaproxy/action-full-scan (zaproxy/action-full-scan)

v0.13.0

Compare Source

First release to Marketplace.

---

Configuration

📅 Schedule: Branch creation - "before 6am every weekday" in timezone America/Vancouver, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Thanks for the PR!

Deployments, as required, will be available below:

• Backend
• Frontend

Please create PRs in draft mode. Mark as ready to enable:

• Analysis Workflow

After merge, new images are deployed in:

• Merge Workflow