chore(deps): update all github action dependencies (v1.13) (minor)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
KyleMayes/install-llvm-action	action	minor	v1.8.3 -> v1.9.0
actions/checkout	action	minor	v4.0.0 -> v4.1.1
actions/checkout	action	minor	v3.5.3 -> v3.6.0
azure/login	action	minor	v1.4.7 -> v1.5.0
docker/build-push-action	action	minor	v5.0.0 -> v5.1.0
github/codeql-action	action	minor	v2.21.9 -> v2.22.7
google-github-actions/auth	action	minor	v1.1.1 -> v1.2.0
nick-invision/retry	action	minor	v2.8.3 -> v2.9.0
sigstore/cosign-installer	action	minor	v3.1.2 -> v3.2.0

---

Release Notes

KyleMayes/install-llvm-action (KyleMayes/install-llvm-action)

v1.9.0

Compare Source

• Add support for LLVM 17 (binaries not available for macOS runners)
• Update dependencies and use node20 runner
• Fix downloadUrl option usage on Linux and Windows runners (#​57)

actions/checkout (actions/checkout)

v4.1.1

Compare Source

What's Changed

• Update CODEOWNERS to Launch team by @​joshmgross in https://github.com/actions/checkout/pull/1510
• Correct link to GitHub Docs by @​peterbe in https://github.com/actions/checkout/pull/1511
• Link to release page from what's new section by @​cory-miller in https://github.com/actions/checkout/pull/1514

New Contributors

• @​joshmgross made their first contribution in https://github.com/actions/checkout/pull/1510
• @​peterbe made their first contribution in https://github.com/actions/checkout/pull/1511

Full Changelog: actions/checkout@v4.1.0...v4.1.1

v4.1.0

Compare Source

• Add support for partial checkout filters

azure/login (azure/login)

v1.5.0: Azure Login Action v1.5.0

Compare Source

• Updated the versions of dependencies.
• Supported passwords to start with hyphen(-).
• Enabled OIDC for sovereign clouds.
• Supported Managed Identity Login.

docker/build-push-action (docker/build-push-action)

v5.1.0

Compare Source

• Add annotations input by @​crazy-max in https://github.com/docker/build-push-action/pull/992
• Add secret-envs input by @​elias-lundgren in https://github.com/docker/build-push-action/pull/980
• Bump @​babel/traverse from 7.17.3 to 7.23.2 by @​dependabot in https://github.com/docker/build-push-action/pull/991
• Bump @​docker/actions-toolkit from 0.13.0-rc.1 to 0.14.0 in https://github.com/docker/build-push-action/pull/990 https://github.com/docker/build-push-action/pull/1006

Full Changelog: docker/build-push-action@v5.0.0...v5.1.0

github/codeql-action (github/codeql-action)

v2.22.7

Compare Source

v2.22.6

Compare Source

v2.22.5

Compare Source

v2.22.4

Compare Source

v2.22.3

Compare Source

v2.22.2

Compare Source

v2.22.1

Compare Source

v2.22.0

Compare Source

google-github-actions/auth (google-github-actions/auth)

v1.2.0

Compare Source

What's Changed

• Update deps by @​sethvargo in https://github.com/google-github-actions/auth/pull/312
• dependabot: only do security updates by @​sethvargo in https://github.com/google-github-actions/auth/pull/320
• update all deps by @​sethvargo in https://github.com/google-github-actions/auth/pull/321
• Update README.md by @​mattseymour in https://github.com/google-github-actions/auth/pull/332
• Update deps to Node 20 by @​sethvargo in https://github.com/google-github-actions/auth/pull/339
• Drop chai and mocha deps by @​sethvargo in https://github.com/google-github-actions/auth/pull/342
• Switch to more resilient testing by @​sethvargo in https://github.com/google-github-actions/auth/pull/343
• Build latest versions by @​sethvargo in https://github.com/google-github-actions/auth/pull/345
• Release: v1.2.0 by @​google-github-actions-bot in https://github.com/google-github-actions/auth/pull/346

New Contributors

• @​mattseymour made their first contribution in https://github.com/google-github-actions/auth/pull/332

Full Changelog: google-github-actions/auth@v1...v1.2.0

nick-invision/retry (nick-invision/retry)

v2.9.0

Compare Source

Features

• shell: checks only the shell name and allows any argument (#​118) (1139f99)

sigstore/cosign-installer (sigstore/cosign-installer)

v3.2.0

Compare Source

Note: This release comes with a fix for CVE-2023-46737 described in this Github Security Advisory. Please upgrade to this release ASAP

see https://github.com/sigstore/cosign/releases/tag/v2.2.1

What's Changed

• Support the runner context of gitea act by @​josedev-union in https://github.com/sigstore/cosign-installer/pull/147
• bump cosign to v2.2.1 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/148
• test with latest go version by @​bobcallaway in https://github.com/sigstore/cosign-installer/pull/150

New Contributors

• @​josedev-union made their first contribution in https://github.com/sigstore/cosign-installer/pull/147

Full Changelog: sigstore/cosign-installer@v3...v3.2.0

---

Configuration

📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[brlbil]

/test-backport-1.13

[brlbil]

/test-backport-1.13