Update GitHub Actions (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
JS-DevTools/npm-publish	action	major	v1 -> v3
actions/checkout	action	major	v3 -> v4
actions/setup-node	action	major	v3 -> v4
actions/stale	action	major	v7 -> v9
suzuki-shunsuke/github-action-renovate-config-validator	action	major	v0.1.2 -> v1.0.1

---

Release Notes

JS-DevTools/npm-publish (JS-DevTools/npm-publish)

v3

Compare Source

v2

Compare Source

actions/checkout (actions/checkout)

v4

Compare Source

• Support fetching without the --progress option
• Update to node20

actions/setup-node (actions/setup-node)

v4

Compare Source

actions/stale (actions/stale)

v9

Compare Source

v8

Compare Source

suzuki-shunsuke/github-action-renovate-config-validator (suzuki-shunsuke/github-action-renovate-config-validator)

v1.0.1

Compare Source

Fixes

#​551 Suppress npx warnings using --yes option @​TWiStErRob

This action executes renovate-config-validator via npx, then the following warning was outputted.

npm WARN exec The following package was not found and will be installed: renovate@37.130.0

To suppress the warning, we set npx's --yes option.

https://docs.npmjs.com/cli/v8/commands/npx

If any requested packages are not present in the local project dependencies, then they are installed to a folder in the npm cache, which is added to the PATH environment variable in the executed process.
A prompt is printed (which can be suppressed by providing either --yes or --no).

To prevent security and user-experience problems from mistyping package names, npx prompts before installing anything.
Suppress this prompt with the -y or --yes option.
The --no-install option is deprecated, and will be converted to --no.

🎉 New contributors

Thank you for your contribution!

@​TWiStErRob #​551

v1.0.0

Compare Source

⚠️ Breaking Changes

#​531 renovate-config-validator's --strict option is enabled by default.

How to migrate

There are several options.

1. Recommended: Fix Renovate configuration according to the error message
2. Unrecommended: Set false to the input strict to disable --strict option

⚠️ Security Improvement

#​530 Pass inputs via environment variables to prevent malicious injection

Features

#​531 Add the input strict.

You can enable renovate-config-validator's --strict option.

v0.1.3

Compare Source

#​316 Support .renovaterc.json5 by default

https://docs.renovatebot.com/configuration-options/#configuration-options

---

Configuration

📅 Schedule: Branch creation - "before 3am every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.