chore(deps): update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v4.1.1 -> v4.2.2
aquasecurity/trivy-action	action	minor	0.15.0 -> 0.28.0

---

Release Notes

actions/checkout (actions/checkout)

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in https://github.com/actions/checkout/pull/1941
• Expand unit test coverage for isGhes by @​jww3 in https://github.com/actions/checkout/pull/1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in https://github.com/actions/checkout/pull/1739
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1697
• Check out other refs/* by commit by @​orhantoy in https://github.com/actions/checkout/pull/1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in https://github.com/actions/checkout/pull/1776

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in https://github.com/actions/checkout/pull/1732

v4.1.5

Compare Source

What's Changed

• Update NPM dependencies by @​cory-miller in https://github.com/actions/checkout/pull/1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in https://github.com/actions/checkout/pull/1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in https://github.com/actions/checkout/pull/1707

Full Changelog: actions/checkout@v4.1.4...v4.1.5

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1692
• Add dependabot config by @​cory-miller in https://github.com/actions/checkout/pull/1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in https://github.com/actions/checkout/pull/1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in https://github.com/actions/checkout/pull/1643

v4.1.3

Compare Source

What's Changed

• Update actions/checkout version in update-main-version.yml by @​jww3 in https://github.com/actions/checkout/pull/1650
• Check git version before attempting to disable sparse-checkout by @​jww3 in https://github.com/actions/checkout/pull/1656
• Add SSH user parameter by @​cory-miller in https://github.com/actions/checkout/pull/1685

Full Changelog: actions/checkout@v4.1.2...v4.1.3

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in https://github.com/actions/checkout/pull/1598

aquasecurity/trivy-action (aquasecurity/trivy-action)

v0.28.0

Compare Source

What's Changed

• chore(deps): bump setup-trivy to v0.2.1 by @​DmitriyLewen in https://github.com/aquasecurity/trivy-action/pull/411

Full Changelog: aquasecurity/trivy-action@0.27.0...0.28.0

v0.27.0

Compare Source

What's Changed

• ci: use setup-trivy to install Trivy by @​DmitriyLewen in https://github.com/aquasecurity/trivy-action/pull/406
• chore: update description for scanners and format inputs by @​nikpivkin in https://github.com/aquasecurity/trivy-action/pull/407
• fix: set envs only when passed by @​knqyf263 in https://github.com/aquasecurity/trivy-action/pull/405

Full Changelog: aquasecurity/trivy-action@0.26.0...0.27.0

v0.26.0

Compare Source

What's Changed

• docs: add usage info about action/cache for trivy databases by @​DmitriyLewen in https://github.com/aquasecurity/trivy-action/pull/397
• feat: store artifacts in cache by default by @​knqyf263 in https://github.com/aquasecurity/trivy-action/pull/399

Full Changelog: aquasecurity/trivy-action@0.25.0...0.26.0

v0.25.0

Compare Source

What's Changed

• fix(Makefile): recursive option typo by @​chohner in https://github.com/aquasecurity/trivy-action/pull/371
• chore: use checks bundle snapshot from trivy-action by @​nikpivkin in https://github.com/aquasecurity/trivy-action/pull/388
• Upgrade GitHub actions by @​obounaim in https://github.com/aquasecurity/trivy-action/pull/374
• ci: sync trivy-checks version 1 by @​nikpivkin in https://github.com/aquasecurity/trivy-action/pull/398
• feat(trivy): Bump to support v0.56.1 by @​simar7 in https://github.com/aquasecurity/trivy-action/pull/387

New Contributors

• @​chohner made their first contribution in https://github.com/aquasecurity/trivy-action/pull/371
• @​obounaim made their first contribution in https://github.com/aquasecurity/trivy-action/pull/374

Full Changelog: aquasecurity/trivy-action@0.24.0...0.25.0

v0.24.0

Compare Source

What's Changed

• Upgrade trivy to v0.53.0 by @​Dr-DevOps in https://github.com/aquasecurity/trivy-action/pull/369

Full Changelog: aquasecurity/trivy-action@0.23.0...0.24.0

v0.23.0

Compare Source

What's Changed

• Upgrade trivy to v0.52.2 by @​Dr-DevOps in https://github.com/aquasecurity/trivy-action/pull/367

Full Changelog: aquasecurity/trivy-action@0.22.0...0.23.0

v0.22.0

Compare Source

What's Changed

• chore(docs): Reference the use of a pinned version by @​simar7 in https://github.com/aquasecurity/trivy-action/pull/356
• Upgrade trivy to v0.52.0 by @​Keralin in https://github.com/aquasecurity/trivy-action/pull/364

New Contributors

• @​Keralin made their first contribution in https://github.com/aquasecurity/trivy-action/pull/364

Full Changelog: aquasecurity/trivy-action@0.21.0...0.22.0

v0.21.0

Compare Source

What's Changed

• bump trivy version to v0.51.2 by @​Dr-DevOps in https://github.com/aquasecurity/trivy-action/pull/360

New Contributors

• @​Dr-DevOps made their first contribution in https://github.com/aquasecurity/trivy-action/pull/360

Full Changelog: aquasecurity/trivy-action@0.20.0...0.21.0

v0.20.0

Compare Source

What's Changed

• Make 'hide-progress' input working again by @​uridium in https://github.com/aquasecurity/trivy-action/pull/323
• feat(image): add --docker-host option for GH Action users by @​calinmarina in https://github.com/aquasecurity/trivy-action/pull/267
• Browse Trivy reports without GitHub Advanced Security license by @​uridium in https://github.com/aquasecurity/trivy-action/pull/328
• Fix docker host bug by @​admiralAwkbar in https://github.com/aquasecurity/trivy-action/pull/329
• Bump trivy version to v0.50.2 by @​pdefreitas in https://github.com/aquasecurity/trivy-action/pull/341
• update tests by @​nikpivkin in https://github.com/aquasecurity/trivy-action/pull/334
• bump trivy version to v0.51.1 by @​simar7 in https://github.com/aquasecurity/trivy-action/pull/353

New Contributors

• @​uridium made their first contribution in https://github.com/aquasecurity/trivy-action/pull/323
• @​calinmarina made their first contribution in https://github.com/aquasecurity/trivy-action/pull/267
• @​admiralAwkbar made their first contribution in https://github.com/aquasecurity/trivy-action/pull/329
• @​pdefreitas made their first contribution in https://github.com/aquasecurity/trivy-action/pull/341

Full Changelog: aquasecurity/trivy-action@0.19.0...0.20.0

v0.19.0

Compare Source

What's Changed

• bump trivy version to v0.50.1 by @​simar7 in https://github.com/aquasecurity/trivy-action/pull/324

Full Changelog: aquasecurity/trivy-action@0.18.0...0.19.0

v0.18.0

Compare Source

v0.17.0

Compare Source

What's Changed

• docs: add configuration info for flags not supported by inputs by @​DmitriyLewen in https://github.com/aquasecurity/trivy-action/pull/296
• fix: Fix skip-files and hide-progress options not being applied when using Sarif report format by @​simao-silva in https://github.com/aquasecurity/trivy-action/pull/297
• Upgrades Trivy from 0.48.1 to v0.49.0 by @​kderck in https://github.com/aquasecurity/trivy-action/pull/304

New Contributors

• @​simao-silva made their first contribution in https://github.com/aquasecurity/trivy-action/pull/297

Full Changelog: aquasecurity/trivy-action@0.16.1...0.17.0

v0.16.1

Compare Source

What's Changed

• Update Trivy to 0.48.1 by @​MartiUK in https://github.com/aquasecurity/trivy-action/pull/291
• docs: fix typo in README.md by @​hairmare in https://github.com/aquasecurity/trivy-action/pull/293

New Contributors

• @​MartiUK made their first contribution in https://github.com/aquasecurity/trivy-action/pull/291
• @​hairmare made their first contribution in https://github.com/aquasecurity/trivy-action/pull/293

Full Changelog: aquasecurity/trivy-action@0.16.0...0.16.1

v0.16.0

Compare Source

What's Changed

• Update to trivy version 0.48.0 by @​pragmaticivan in https://github.com/aquasecurity/trivy-action/pull/289

New Contributors

• @​pragmaticivan made their first contribution in https://github.com/aquasecurity/trivy-action/pull/289

Full Changelog: aquasecurity/trivy-action@0.15.0...0.16.0

---

Configuration

📅 Schedule: Branch creation - "before 5am on Monday,after 10pm on Monday,before 5am on Tuesday,after 10pm on Tuesday,before 5am on Wednesday,after 10pm on Wednesday,before 5am on Thursday,after 10pm on Thursday,before 5am on Friday,every weekend" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.