chore(deps): bump the actions-deps group with 2 updates

[dependabot]

Bumps the actions-deps group with 2 updates: CodSpeedHQ/action and j178/prek-action.

Updates CodSpeedHQ/action from 4.18.5 to 5.0.1

Release notes

Sourced from CodSpeedHQ/action's releases.

v5.0.1

🚀 Highlights

More precise measurements by default

cycle-estimation is now enabled by default, giving more precise benchmark cycle estimation in Simulation mode. See docs.

New: allocation exclusion

Opt in to exclude-allocations to remove allocator time from benchmarks in Simulation mode and reduce variance. See docs.

samply-based profiler by default on Linux

The walltime profiler now uses samply on all OSes. Set CODSPEED_WALLTIME_PROFILER=perf to restore the previous behavior.

⚠️ Breaking changes

• cycle-estimation is now enabled by default (see above)
• The samply-based profiler is now the default on Linux; set CODSPEED_WALLTIME_PROFILER=perf to revert

Details

🚀 Features

• Load eBPF through a delegated BPF token by @​GuillaumeLagrange
• Enable cycle estimation and allocation exclusion by default by @​not-matthias in #461
• Make samply profiler default for all OSes (#472) by @​GuillaumeLagrange in #475

🐛 Bug Fixes

• Classify mapped libraries without init-userns privilege by @​GuillaumeLagrange
• Disable allocator exclusion by default (#489) by @​not-matthias in #489

💼 Other

• Bump the memtrack pin to 1.4.0 by @​adriencaccia in #484

🏗️ Refactor

• Hook-based CPU isolation for the walltime runner by @​GuillaumeLagrange

🧪 Testing

• Run every tracking test under both BPF variants by @​GuillaumeLagrange

⚙️ Internals

• chore: bump runner version to 5.0.1 by @​github-actions[bot] in CodSpeedHQ/action#228
• docs: bump documented action version to v5 by @​adriencaccia in CodSpeedHQ/action#227
• Bump submodule to reduce debug info server timeouts by @​GuillaumeLagrange
• Make tests run release builds of the binaries by @​GuillaumeLagrange in #456
• Update submodule to fix fmt and ignore ubuntu debuginfod serv by @​GuillaumeLagrange

Install codspeed-runner 5.0.1

Install prebuilt binaries via shell script

</tr></table> 

... (truncated)

Commits

• 8847237 Release v5.0.1 🚀
• 81795c3 fix: remove yanked 5.0.0 version hash
• eaace14 docs: bump documented action version to v5
• a3e4fe0 chore: bump runner version to 5.0.1
• f87ba88 Release v5.0.0 🚀
• 7ab72f2 chore: bump runner version to 5.0.0
• f22792b Release v4.19.1 🚀
• b07ddfb chore: bump runner version to 4.19.1
• 9c498ab Release v4.19.0 🚀
• a65d9f0 chore: bump runner version to 4.19.0
• See full diff in compare view

Updates j178/prek-action from 2.0.6 to 3.0.0

Release notes

Sourced from j178/prek-action's releases.

v3.0.0

prek-action releases are now immutable

Starting with v3, prek-action will no longer publish moving major or minor tags. References such as j178/prek-action@v3 and j178/prek-action@v3.0 will not be available.

Moving tags can be retargeted after users adopt them, creating unnecessary supply-chain risk. Use an exact release tag or, for stronger protection, pin the action to a full commit SHA.

[!TIP] Use an exact release tag:

- uses: j178/prek-action@v3.0.0

Or, even better, pin the full commit SHA:

- uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0

What's Changed

• Fix cache key hashing by @​akx in j178/prek-action#153
• Drop floating version tag support by @​j178 in j178/prek-action#170
• Update known versions for prek 0.4.11 by @​j178 in j178/prek-action#169

Full Changelog: j178/prek-action@v2...v3.0.0

Commits

• 4e14d07 Drop floating version tag support (#170)
• d8e544e Fix cache key hashing (#153)
• cd7e67c Update known versions for prek 0.4.11 (#169)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.32%. Comparing base (b98a3a4) to head (1bcf349).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #199      +/-   ##
==========================================
- Coverage   99.33%   97.32%   -2.01%     
==========================================
  Files          21       21              
  Lines         598      598              
==========================================
- Hits          594      582      -12     
- Misses          4       16      +12     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[codspeed-hq]

Hooray! CodSpeed harness just leveled up!

The base and head of this comparison were measured with different runner settings, so their benchmark values are not directly comparable.

What changed between base and head:

• CodSpeed runner v5 changed how benchmarks are measured (base 4.18.4 → head 5.0.1). View release notes
• Cycle estimation (off → on) changes how benchmark performance is calculated. Learn more about cycle estimation

Re-run the base with the same settings to get a valid performance comparison.

---

_{Comparing dependabot/github_actions/actions-deps-3a932df1e0 (1bcf349) with main (b98a3a4)}