Update GitHub Actions

[renovate-rancher]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/attest-build-provenance	action	patch	v4.1.0 → v4.1.1
actions/setup-go	action	digest	4a36011 → 924ae3a
actions/stale	action	minor	v10.2.0 → v10.3.0
docker/build-push-action	action	minor	v7.1.0 → v7.3.0
docker/login-action	action	minor	v4.1.0 → v4.3.0	v4.4.0
docker/setup-buildx-action	action	minor	v4.0.0 → v4.1.0	v4.2.0
rancher/ecm-distro-tools	action	minor	v0.69.3 → v0.74.4
updatecli/updatecli-action	action	minor	v3.2.0 → v3.3.0

---

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

v4.1.1

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

• Update actions/attest to v4.1.1 by @​bdehamer in #​858

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

actions/stale (actions/stale)

v10.3.0

Compare Source

What's Changed

Bug Fix

• Enhancement: ignore stale labeling events by @​shamoon in #​1311

Dependency Updates

• Upgrade dependencies (@​actions/core, @​octokit/plugin-retry, @​typescript-eslint) by @​Copilot in #​1335

New Contributors

• @​shamoon made their first contribution in #​1311

Full Changelog: actions/stale@v10...v10.3.0

docker/build-push-action (docker/build-push-action)

v7.3.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​1567
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​1545 #​1572
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​1568
• Bump js-yaml from 4.1.1 to 4.3.0 in #​1566
• Bump tmp from 0.2.5 to 0.2.7 in #​1547
• Bump undici from 6.24.1 to 6.27.0 in #​1564
• Bump vite from 7.3.2 to 7.3.6 in #​1563

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

v7.2.0

Compare Source

• Bump @​actions/core from 3.0.0 to 3.0.1 in #​1525
• Bump @​docker/actions-toolkit from 0.87.0 to 0.90.0 in #​1517
• Bump brace-expansion from 2.0.2 to 5.0.6 in #​1534
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in #​1529
• Bump fast-xml-parser from 5.5.7 to 5.8.0 in #​1521
• Bump postcss from 8.5.6 to 8.5.10 in #​1526
• Bump tar from 6.2.1 to 7.5.15 in #​1533

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

docker/login-action (docker/login-action)

v4.3.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​1022
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1076.0 #​999 #​1030
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​1004 #​1027
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​1023
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #​1017
• Bump js-yaml from 4.1.1 to 5.2.0 in #​1028
• Bump sigstore from 4.1.0 to 4.1.1 in #​1031
• Bump tmp from 0.2.5 to 0.2.7 in #​1002
• Bump undici from 6.24.1 to 6.27.0 in #​1020
• Bump vite from 7.3.3 to 7.3.6 in #​1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

v4.2.0

Compare Source

• Bump @​actions/core from 3.0.0 to 3.0.1 in #​976
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1050.0 in #​960
• Bump @​docker/actions-toolkit from 0.86.0 to 0.90.0 in #​970
• Bump brace-expansion from 2.0.1 to 5.0.6 in #​993
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in #​985
• Bump fast-xml-parser from 5.3.6 to 5.8.0 in #​963
• Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #​961
• Bump postcss from 8.5.6 to 8.5.10 in #​979
• Bump tar from 6.2.1 to 7.5.15 in #​991
• Bump vite from 7.3.1 to 7.3.3 in #​986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

docker/setup-buildx-action (docker/setup-buildx-action)

v4.1.0

Compare Source

• Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in #​489
• Bump brace-expansion from 1.1.12 to 5.0.6 in #​547 #​508
• Bump fast-xml-builder from 1.0.0 to 1.2.0 in #​540
• Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​496
• Bump flatted from 3.3.3 to 3.4.2 in #​499
• Bump glob from 10.3.12 to 13.0.6 in #​495
• Bump handlebars from 4.7.8 to 4.7.9 in #​504
• Bump lodash from 4.17.23 to 4.18.1 in #​523
• Bump picomatch from 4.0.3 to 4.0.4 in #​503
• Bump postcss from 8.5.6 to 8.5.10 in #​537
• Bump tar from 6.2.1 to 7.5.15 in #​545
• Bump undici from 6.23.0 to 6.25.0 in #​492
• Bump vite from 7.3.1 to 7.3.2 in #​520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

rancher/ecm-distro-tools (rancher/ecm-distro-tools)

v0.74.4

Compare Source

What's Changed

• Add release update rke2 references [version] command by @​rafaelbreno in #​975
• Bump slsactl to v0.1.35 by @​dereknola in #​989
• add release ecm distro tools action by @​tashima42 in #​990
• rollback pin version by @​tashima42 in #​995
• Update zizmorcore/zizmor-action action to v0.5.7 by @​renovate-rancher[bot] in #​991
• Update actions/checkout action to v7 by @​renovate-rancher[bot] in #​988
• Update rancher/ecm-distro-tools action to v0.74.3 by @​renovate-rancher[bot] in #​987
• Update docker/setup-qemu-action action to v4.1.0 by @​renovate-rancher[bot] in #​986
• Update module github.com/google/go-containerregistry to v0.21.7 by @​renovate-rancher[bot] in #​985
• Update docker/setup-buildx-action action to v4.1.0 by @​renovate-rancher[bot] in #​983
• Update docker/login-action action to v4.2.0 by @​renovate-rancher[bot] in #​982
• Update actions/setup-go digest to 924ae3a by @​renovate-rancher[bot] in #​980
• Update module github.com/aws/aws-sdk-go-v2/config to v1.32.25 by @​renovate-rancher[bot] in #​976

Full Changelog: rancher/ecm-distro-tools@v0.74.3...v0.74.4

v0.74.3

Compare Source

What's Changed

• chore(deps): update dependency mikefarah/yq to v4.53.3 by @​renovate-rancher[bot] in #​967
• chore(deps): update golang.org/x dependencies by @​renovate-rancher[bot] in #​966
• chore(deps): update github actions by @​renovate-rancher[bot] in #​962
• chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.32.24 by @​renovate-rancher[bot] in #​961
• install action: use /usr/local/bin by default by @​tashima42 in #​978

Full Changelog: rancher/ecm-distro-tools@v0.74.2...v0.74.3

v0.74.2

Compare Source

What's Changed

• fix ecm distro tools install path by @​tashima42 in #​973
• Add conditional to check if Auth is nil by @​rafaelbreno in #​974

Full Changelog: rancher/ecm-distro-tools@v0.74.1...v0.74.2

v0.74.1

Compare Source

What's Changed

• Add conditional to read GITHUB_TOKEN from env by @​rafaelbreno in #​969

Full Changelog: rancher/ecm-distro-tools@v0.74.0...v0.74.1

v0.74.0

Compare Source

What's Changed

• Add release stats cve command by @​rafaelbreno in #​941

Full Changelog: rancher/ecm-distro-tools@v0.73.2...v0.74.0

v0.73.2

Compare Source

What's Changed

• chore(deps): update github actions by @​renovate-rancher[bot] in #​955
• chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.32.20 by @​renovate-rancher[bot] in #​959

Full Changelog: rancher/ecm-distro-tools@v0.73.0...v0.73.2

v0.73.1

Compare Source

v0.73.0

Compare Source

v0.72.0

Compare Source

What's Changed

• add inspect button to redirect to sbom viewer by @​tashima42 in #​949
• chore(deps): update module github.com/go-git/go-git/v5 to v5.19.1 [security] by @​renovate-rancher[bot] in #​953
• chore(deps): update rancher/ecm-distro-tools action to v0.69.2 by @​renovate-rancher[bot] in #​954
• chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.32.18 by @​renovate-rancher[bot] in #​917

Full Changelog: rancher/ecm-distro-tools@v0.71.0...v0.72.0

v0.71.0

Compare Source

What's Changed

• Specify slsactl version to be able to consume desired version by @​furkatgofurov7 in #​940
• start code clean up and remove unused code by @​briandowns in #​939
• fix linter warnings and remove rke2_release command by @​tashima42 in #​944
• chore(deps): update golang.org/x dependencies by @​renovate-rancher[bot] in #​948
• chore(deps): update module github.com/google/go-containerregistry to v0.21.6 by @​renovate-rancher[bot] in #​945
• chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.101.0 by @​renovate-rancher[bot] in #​928
• chore(deps): update module github.com/masterminds/semver/v3 to v3.5.0 by @​renovate-rancher[bot] in #​920
• chore(deps): update github actions by @​renovate-rancher[bot] in #​921
• chore(deps): update module golang.org/x/crypto to v0.52.0 [security] by @​renovate-rancher[bot] in #​942
• chore(deps): update rancher/ecm-distro-tools action to v0.69.0 by @​renovate-rancher[bot] in #​950

Full Changelog: rancher/ecm-distro-tools@v0.70.0...v0.71.0

v0.70.0

Compare Source

What's Changed

• chore: bump slsactl to v0.1.33 by @​furkatgofurov7 in #​924
• Add Tools section in Prime Ribs page by @​rafaelbreno in #​933

New Contributors

• @​furkatgofurov7 made their first contribution in #​924

Full Changelog: rancher/ecm-distro-tools@v0.69.4...v0.70.0

v0.69.4

Compare Source

What's Changed

• chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.100.1 by @​renovate-rancher[bot] in #​918
• Add TrimSpace version by @​rafaelbreno in #​926

Full Changelog: rancher/ecm-distro-tools@v0.69.3...v0.69.4

updatecli/updatecli-action (updatecli/updatecli-action)

v3.3.0: 🌈

Compare Source

Changes

• deps: update updatecli version to v0.118.0 @​updateclibot[bot] (#​1117)
• Bump "js-yaml" package version @​updateclibot[bot] (#​1115)
• Bump "eslint-plugin-prettier" package version @​updateclibot[bot] (#​1112)
• Bump "@​types/node" package version @​updateclibot[bot] (#​1111)
• deps: update updatecli version to v0.117.1 @​updateclibot[bot] (#​1108)
• Bump "jest" package version @​updateclibot[bot] (#​1105)
• Bump "@​types/node" package version @​updateclibot[bot] (#​1104)

🧰 Maintenance

• deps: bump Updatecli GH action to v0.117.1 @​updateclibot[bot] (#​1109)
• deps: bump Updatecli GH action to v3.2.0 @​updateclibot[bot] (#​1103)

Contributors

@​updateclibot[bot] and updateclibot[bot]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.