chore(deps): update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
chainguard-dev/actions	action	patch	v1.6.29 → v1.6.30
chainguard-images/actions	action	patch	v1.0.37 → v1.0.38
github/codeql-action	action	patch	v4.37.3 → v4.37.6

---

Release Notes

chainguard-dev/actions (chainguard-dev/actions)

v1.6.30

Compare Source

What's Changed

• fix(setup-argo-workflows): harden release-asset downloads with curl --fail + retry by @​aczajkowski in #​1010
• build(deps): bump the actions group across 8 directories with 10 updates by @​dependabot[bot] in #​1009
• build(deps): bump github.com/sethvargo/go-envconfig from 1.4.2 to 1.4.3 in /hugo2confluence by @​dependabot[bot] in #​1007
• fix(ci): allowlist CA revocation endpoints for Windows egress policy by @​cpanato in #​1011
• build(deps): bump step-security/harden-runner from 2.19.4 to 2.20.0 by @​dependabot[bot] in #​993
• build(deps): bump otel-export dependencies and rebuild dist by @​cpanato in #​1012
• build(deps): bump reviewdog/action-actionlint from 1.72.0 to 1.73.0 by @​dependabot[bot] in #​1019
• build(deps): bump the actions group across 8 directories with 8 updates by @​dependabot[bot] in #​1018

New Contributors

• @​aczajkowski made their first contribution in #​1010

Full Changelog: chainguard-dev/actions@v1.6.29...v1.6.30

chainguard-images/actions (chainguard-images/actions)

v1.0.38

Compare Source

What's Changed

• build(deps): Bump the patch-updates group across 4 directories with 4 updates by @​dependabot[bot] in #​391
• build(deps): Bump actions/setup-go from 6.5.0 to 7.0.0 in /tag by @​dependabot[bot] in #​390
• build(deps): Bump zizmorcore/zizmor-action from 0.5.7 to 0.6.0 by @​dependabot[bot] in #​389

Full Changelog: chainguard-images/actions@v1.0.37...v1.0.38

github/codeql-action (github/codeql-action)

v4.37.6

Compare Source

• Changed the default filepath for the new remote file address format that was introduced in CodeQL Action 4.37.0 / 3.37.0 to .github/codeql-config.yml to align it with the suggested path that is used elsewhere. #​4070

v4.37.5

Compare Source

v4.37.4

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.