chore(deps): update dependabot/fetch-metadata action to v2.4.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
dependabot/fetch-metadata	action	minor	v2.0.0 -> v2.4.0

---

Release Notes

dependabot/fetch-metadata (dependabot/fetch-metadata)

v2.4.0

Compare Source

What's Changed

• Bump actions/create-github-app-token from 1.11.0 to 1.11.3 by @​dependabot in https://github.com/dependabot/fetch-metadata/pull/598
• Bump @​vercel/ncc from 0.38.1 to 0.38.3 by @​dependabot in https://github.com/dependabot/fetch-metadata/pull/578
• Add missing @octokit/request-error to package.json by @​jeffwidman in https://github.com/dependabot/fetch-metadata/pull/605
• Bump to ESLint 9 by @​jeffwidman in https://github.com/dependabot/fetch-metadata/pull/606
• Stop using a node16 devcontainer image by @​jeffwidman in https://github.com/dependabot/fetch-metadata/pull/608
• Make typescript compile to "es2022" by @​jeffwidman in https://github.com/dependabot/fetch-metadata/pull/609
• Bump the dev-dependencies group across 1 directory with 8 updates by @​dependabot in https://github.com/dependabot/fetch-metadata/pull/607
• Tidy up examples slightly by @​jeffwidman in https://github.com/dependabot/fetch-metadata/pull/611
• Fixup some anchor tags that weren't deeplinking by @​jeffwidman in https://github.com/dependabot/fetch-metadata/pull/614
• Remove unnecessary hardcoding of ref by @​jeffwidman in https://github.com/dependabot/fetch-metadata/pull/617
• Bump actions/create-github-app-token from 1.11.3 to 2.0.2 by @​dependabot in https://github.com/dependabot/fetch-metadata/pull/616
• Enable caching of npm install/npm ci for setup-node action by @​jeffwidman in https://github.com/dependabot/fetch-metadata/pull/618
• Add workflow to publish new version of immutable action on every release by @​jeffwidman in https://github.com/dependabot/fetch-metadata/pull/623
• Bump actions/create-github-app-token from 2.0.2 to 2.0.6 by @​dependabot in https://github.com/dependabot/fetch-metadata/pull/621
• v2.4.0 by @​fetch-metadata-action-automation in https://github.com/dependabot/fetch-metadata/pull/594

Full Changelog: dependabot/fetch-metadata@v2...v2.4.0

v2.3.0

Compare Source

What's Changed

• Bump actions/create-github-app-token from 1.10.2 to 1.10.3 by @​dependabot in https://github.com/dependabot/fetch-metadata/pull/537
• Update readme to include an if conditional by @​Nishnha in https://github.com/dependabot/fetch-metadata/pull/548
• Silence audit and funding messages from npm by @​jeffwidman in https://github.com/dependabot/fetch-metadata/pull/550
• Bump actions/create-github-app-token from 1.10.3 to 1.11.0 by @​dependabot in https://github.com/dependabot/fetch-metadata/pull/554
• fix readme action example by @​CloudNStoyan in https://github.com/dependabot/fetch-metadata/pull/563
• Fixed missing outputs in action.yml by @​CatChen in https://github.com/dependabot/fetch-metadata/pull/564
• Handle branch names containing dependency group by @​CloudNStoyan in https://github.com/dependabot/fetch-metadata/pull/565
• v2.3.0 by @​fetch-metadata-action-automation in https://github.com/dependabot/fetch-metadata/pull/543

New Contributors

• @​CloudNStoyan made their first contribution in https://github.com/dependabot/fetch-metadata/pull/563
• @​CatChen made their first contribution in https://github.com/dependabot/fetch-metadata/pull/564

Full Changelog: dependabot/fetch-metadata@v2...v2.3.0

v2.2.0

Compare Source

What's Changed

• Bump actions/create-github-app-token from 1.9.0 to 1.10.0 by @​dependabot in https://github.com/dependabot/fetch-metadata/pull/523
• Bump actions/create-github-app-token from 1.10.0 to 1.10.2 by @​dependabot in https://github.com/dependabot/fetch-metadata/pull/534
• Bump braces from 3.0.2 to 3.0.3 by @​dependabot in https://github.com/dependabot/fetch-metadata/pull/532
• v2.2.0 by @​fetch-metadata-action-automation in https://github.com/dependabot/fetch-metadata/pull/520

Full Changelog: dependabot/fetch-metadata@v2...v2.2.0

v2.1.0

Compare Source

What's Changed

• Relax engine-strict=true by @​jeffwidman in https://github.com/dependabot/fetch-metadata/pull/510
• Handle branch names containing hyphen separators by @​tspencer244 in https://github.com/dependabot/fetch-metadata/pull/450
• Switch to monthly release cadence by @​jeffwidman in https://github.com/dependabot/fetch-metadata/pull/509
• v2.1.0 by @​fetch-metadata-action-automation in https://github.com/dependabot/fetch-metadata/pull/518

New Contributors

• @​tspencer244 made their first contribution in https://github.com/dependabot/fetch-metadata/pull/450

Full Changelog: dependabot/fetch-metadata@v2.0.0...v2.1.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sourcery-ai]

Reviewer's Guide

Updates the dependabot/fetch-metadata GitHub Action in the security workflow from v2.0.0 to v2.4.0 by pinning it to the corresponding commit SHA.

File-Level Changes

Change	Details	Files
Bump dependabot/fetch-metadata action version	Replaced uses reference from v2.0.0 to the commit SHA for v2.4.0 Kept existing github-token input unchanged	.github/workflows/security.yml

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/dependabot/fetch-metadata	08eff52bf64351f401fb50d4972fa95b9f2c2d1b	🟢 6.7	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Maintained 🟢 10 27 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Pinned-Dependencies 🟢 3 dependency not pinned by hash detected -- score normalized to 3 Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Security-Policy 🟢 10 security policy file detected Branch-Protection 🟢 5 branch protection is not maximal on development and all release branches SAST 🟢 10 SAST tool is run on all commits Vulnerabilities 🟢 4 6 existing vulnerabilities detected

Scanned Files

• .github/workflows/security.yml

[cloudflare-workers-and-pages]

Deploying tux with    Cloudflare Pages

Latest commit:	0ce1700
Status:	✅  Deploy successful!
Preview URL:	https://b8f2fa28.tux-afh.pages.dev
Branch Preview URL:	https://renovate-dependabot-fetch-me.tux-afh.pages.dev

View logs