chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
CodSpeedHQ/action	action	minor	v4.17.6 → v4.18.1
oxc-project/security-action	action	patch	v1.0.7 → v1.0.8

---

Release Notes

CodSpeedHQ/action (CodSpeedHQ/action)

v4.18.1

Compare Source

Release Notes

🚀 Features

• Bump go-runner to 1.2.1 by @​adriencaccia in #​421

Install codspeed-runner 4.18.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.1/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.18.1

File	Platform	Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

v4.18.0

Compare Source

Release Notes

🚀 Features

• Bump valgrind-codspeed to 3.26.0-0codspeed4
• Bump samply by @​GuillaumeLagrange in #​415
• Set env var to have node dump inlining information by @​GuillaumeLagrange
• Change isolation logic to include samply and non root fallback by @​GuillaumeLagrange
• Add experimental --cycle-estimation flag by @​not-matthias in #​412
• Make samply-codspeed a submodule rather than git rev with cargo by @​GuillaumeLagrange in #​416

🐛 Bug Fixes

• Honor locally-installed valgrind on non-apt systems by @​not-matthias in #​414

Install codspeed-runner 4.18.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.18.0/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.18.0

File	Platform	Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

oxc-project/security-action (oxc-project/security-action)

v1.0.8

Compare Source

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codspeed-hq]

Merging this PR will not alter performance

✅ 12 untouched benchmarks

---

_{Comparing renovate/github-actions (99b476f) with main (836be76)}