🌱 Bump the github-actions group with 2 updates #1623

	name: CI-Tests
	on:
	push:
	branches: [ main ]
	pull_request:
	branches: [ main ]

	permissions: read-all

	jobs:
	unit-tests:
	name: Run unit tests
	runs-on: ${{ matrix.os }}
	strategy:
	matrix:
	os: [ ubuntu-latest ]
	permissions:
	id-token: write # Needed to pick up on signing with a GitHub workflow identity.
	steps:
	- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
	with:
	go-version-file: go.mod
	cache: true
	- name: Run Go tests
	# cannot run tests with race because we are mutating state (setting ENV variables)
	run: GITHUB_AUTH_TOKEN=${{ secrets.GITHUB_TOKEN }} go test -covermode=atomic -coverprofile=unit-coverage.out ./...
	- name: Upload codecoverage
	uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3.1.6
	with:
	files: ./unit-coverage.out
	verbose: true

	verify:
	name: Run verify
	runs-on: ${{ matrix.os }}
	strategy:
	matrix:
	os: [ ubuntu-latest ]
	steps:
	- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
	- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
	with:
	go-version-file: go.mod
	cache: true
	- name: Run Go verify
	run: \|
	go mod tidy && go mod verify
	git diff --exit-code

Provide feedback