fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
codecov/codecov-action	action	minor	v5.3.1 -> v5.4.0
github.com/go-vela/server	require	patch	v0.26.2 -> v0.26.4
github.com/urfave/cli/v2	require	patch	v2.27.5 -> v2.27.6
github/codeql-action	action	patch	v3.28.10 -> v3.28.11

---

Release Notes

codecov/codecov-action (codecov/codecov-action)

v5.4.0

Compare Source

What's Changed

• update wrapper submodule to 0.2.0, add recurse_submodules arg by @​matt-codecov in https://github.com/codecov/codecov-action/pull/1780
• build(deps): bump actions/upload-artifact from 4.6.0 to 4.6.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1775
• build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.1 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1776
• build(deps): bump github/codeql-action from 3.28.9 to 3.28.10 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1777
• Clarify in README that use_pypi bypasses integrity checks too by @​webknjaz in https://github.com/codecov/codecov-action/pull/1773
• Fix use of safe.directory inside containers by @​Flamefire in https://github.com/codecov/codecov-action/pull/1768
• Fix description for report_type input by @​craigscott-crascit in https://github.com/codecov/codecov-action/pull/1770
• build(deps): bump github/codeql-action from 3.28.8 to 3.28.9 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1765
• Fix a typo in the example by @​miranska in https://github.com/codecov/codecov-action/pull/1758
• build(deps): bump github/codeql-action from 3.28.5 to 3.28.8 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1757
• build(deps): bump github/codeql-action from 3.28.1 to 3.28.5 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1753

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.3.1..v5.4.0

go-vela/server (github.com/go-vela/server)

v0.26.4

Compare Source

What's Changed

• fix(revert): reverting a couple of 0.26.2 fixes by @​wass3rw3rk in https://github.com/go-vela/server/pull/1267

Full Changelog: go-vela/server@v0.26.3...v0.26.4

v0.26.3

Compare Source

What's Changed

• fix: support list of cors origins by @​plyr4 in https://github.com/go-vela/server/pull/1262
• fix(deployment): set repo on create/update DB funcs by @​ecrupper in https://github.com/go-vela/server/pull/1263
• fix(deps): update all non-major dependencies by @​renovate in https://github.com/go-vela/server/pull/1261

Full Changelog: go-vela/server@v0.26.2...v0.26.3

urfave/cli (github.com/urfave/cli/v2)

v2.27.6

Compare Source

What's Changed

• Use usage template in subcommand help by @​meatballhat in https://github.com/urfave/cli/pull/1986
• Docs: Update cli.yml by @​dearchap in https://github.com/urfave/cli/pull/2015
• Fix:(issue_2069) Add sep for string slice by @​dearchap in https://github.com/urfave/cli/pull/2070

Full Changelog: urfave/cli@v2.27.5...v2.27.6

github/codeql-action (github/codeql-action)

v3.28.11

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.11 - 07 Mar 2025

• Update default CodeQL bundle version to 2.20.6. #​2793

See the full CHANGELOG.md for more information.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
golang.org/x/net	v0.34.0 -> v0.35.0
golang.org/x/sys	v0.30.0 -> v0.31.0