Update GitHub Actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/attest	action	minor	v4.1.1 → v4.2.0
j178/prek-action	action	patch	v2.0.5 → v2.0.6
ruby/setup-ruby	action	minor	v1.318.0 → v1.319.0	v1.321.0 (+1)
taiki-e/install-action	action	patch	v2.83.2 → v2.83.4	v2.85.2 (+4)
zizmorcore/zizmor-action	action	minor	v0.5.7 → v0.6.0	v0.6.1

---

Release Notes

actions/attest (actions/attest)

v4.2.0

Compare Source

What's Changed

• fix: split checksums on any line ending so LF files parse on Windows by @​bdehamer in #​443
• Bump @​actions/glob from 0.6.1 to 0.7.0 in the npm-production group across 1 directory by @​dependabot[bot] in #​435
• Bump csv-parse from 6.2.1 to 7.0.1 by @​dependabot[bot] in #​437
• Read subjects from GITHUB_ARTIFACTS_LIST by @​bdehamer in #​447
• Support SHA-2 subject digests by @​bdehamer in #​446

Full Changelog: actions/attest@v4.1.1...v4.2.0

j178/prek-action (j178/prek-action)

v2.0.6

Compare Source

What's Changed

• Update known versions for prek 0.4.6 by @​j178 in #​159
• Update known versions for prek 0.4.8 by @​j178 in #​162
• Update known versions for prek 0.4.9 by @​j178 in #​163
• Update known versions for prek 0.4.10 by @​j178 in #​167
• Disable color in prek cache dir output by @​KSmanis in #​168

New Contributors

• @​KSmanis made their first contribution in #​168

Full Changelog: j178/prek-action@v2...v2.0.6

ruby/setup-ruby (ruby/setup-ruby)

v1.319.0

Compare Source

What's Changed

• Add ruby-3.3.12 by @​ruby-builder-bot in #​930

Full Changelog: ruby/setup-ruby@v1.318.0...v1.319.0

taiki-e/install-action (taiki-e/install-action)

v2.83.4: 2.83.4

Compare Source

• Update vacuum@latest to 0.29.10.

• Update uv@latest to 0.11.29.

• Update syft@latest to 1.48.0.

• Update prek@latest to 0.4.10.

• Update mise@latest to 2026.7.7.

• Update cargo-shear@latest to 1.13.2.

v2.83.3: 2.83.3

Compare Source

• Update release-plz@latest to 0.3.160.

• Update prek@latest to 0.4.9.

• Update mise@latest to 2026.7.6.

• Update dprint@latest to 0.55.2.

• Update cargo-dinghy@latest to 0.8.5.

• Update cargo-binstall@latest to 1.21.0.

• Update biome@latest to 2.5.4.

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.6.0

Compare Source

zizmor 1.27.0 is now the default version used by the action.

What's Changed

• Fold Docker image pull output into a collapsed Actions log group by @​woodruffw with @​Copilot in #​132
• Readme: document missing inputs by @​staabm in #​130
• ci: block version sync workflow on forks by @​shaanmajid in #​129
• Sync zizmor versions by @​github-actions[bot] in #​137
• Add collect input by @​woodruffw in #​139

New Contributors

• @​woodruffw with @​Copilot made their first contribution in #​132
• @​staabm made their first contribution in #​130
• @​shaanmajid made their first contribution in #​129

Full Changelog: zizmorcore/zizmor-action@v0.5.7...v0.6.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 93.50%. Comparing base (2aade04) to head (8135d9f).
⚠️ Report is 4 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #2422      +/-   ##
==========================================
+ Coverage   89.69%   93.50%   +3.81%     
==========================================
  Files         130      130              
  Lines       28032    28032              
==========================================
+ Hits        25142    26212    +1070     
+ Misses       2890     1820    -1070     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.