Update GitHub Actions

[renovate-rancher]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/attest-build-provenance	action	patch	v4.1.0 → v4.1.1
actions/checkout	action	patch	v6.0.2 → v6.0.3
actions/checkout	action	digest	de0fac2 → df4cb1c
actions/stale	action	minor	v10.2.0 → v10.3.0
docker/build-push-action	action	minor	v7.1.0 → v7.2.0	v7.3.0
docker/login-action	action	minor	v4.1.0 → v4.2.0	v4.4.0 (+1)
docker/setup-buildx-action	action	minor	v4.0.0 → v4.1.0	v4.2.0
rancher/ecm-distro-tools	action	minor	v0.69.3 → v0.74.3	v0.74.4

---

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

v4.1.1

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

• Update actions/attest to v4.1.1 by @​bdehamer in #​858

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

actions/stale (actions/stale)

v10.3.0

Compare Source

What's Changed

Bug Fix

• Enhancement: ignore stale labeling events by @​shamoon in #​1311

Dependency Updates

• Upgrade dependencies (@​actions/core, @​octokit/plugin-retry, @​typescript-eslint) by @​Copilot in #​1335

New Contributors

• @​shamoon made their first contribution in #​1311

Full Changelog: actions/stale@v10...v10.3.0

docker/build-push-action (docker/build-push-action)

v7.2.0

Compare Source

• Bump @​actions/core from 3.0.0 to 3.0.1 in #​1525
• Bump @​docker/actions-toolkit from 0.87.0 to 0.90.0 in #​1517
• Bump brace-expansion from 2.0.2 to 5.0.6 in #​1534
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in #​1529
• Bump fast-xml-parser from 5.5.7 to 5.8.0 in #​1521
• Bump postcss from 8.5.6 to 8.5.10 in #​1526
• Bump tar from 6.2.1 to 7.5.15 in #​1533

Full Changelog: docker/build-push-action@v7.1.0...v7.2.0

docker/login-action (docker/login-action)

v4.2.0

Compare Source

• Bump @​actions/core from 3.0.0 to 3.0.1 in #​976
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1050.0 in #​960
• Bump @​docker/actions-toolkit from 0.86.0 to 0.90.0 in #​970
• Bump brace-expansion from 2.0.1 to 5.0.6 in #​993
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in #​985
• Bump fast-xml-parser from 5.3.6 to 5.8.0 in #​963
• Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #​961
• Bump postcss from 8.5.6 to 8.5.10 in #​979
• Bump tar from 6.2.1 to 7.5.15 in #​991
• Bump vite from 7.3.1 to 7.3.3 in #​986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

docker/setup-buildx-action (docker/setup-buildx-action)

v4.1.0

Compare Source

• Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in #​489
• Bump brace-expansion from 1.1.12 to 5.0.6 in #​547 #​508
• Bump fast-xml-builder from 1.0.0 to 1.2.0 in #​540
• Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​496
• Bump flatted from 3.3.3 to 3.4.2 in #​499
• Bump glob from 10.3.12 to 13.0.6 in #​495
• Bump handlebars from 4.7.8 to 4.7.9 in #​504
• Bump lodash from 4.17.23 to 4.18.1 in #​523
• Bump picomatch from 4.0.3 to 4.0.4 in #​503
• Bump postcss from 8.5.6 to 8.5.10 in #​537
• Bump tar from 6.2.1 to 7.5.15 in #​545
• Bump undici from 6.23.0 to 6.25.0 in #​492
• Bump vite from 7.3.1 to 7.3.2 in #​520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

rancher/ecm-distro-tools (rancher/ecm-distro-tools)

v0.74.3

Compare Source

What's Changed

• chore(deps): update dependency mikefarah/yq to v4.53.3 by @​renovate-rancher[bot] in #​967
• chore(deps): update golang.org/x dependencies by @​renovate-rancher[bot] in #​966
• chore(deps): update github actions by @​renovate-rancher[bot] in #​962
• chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.32.24 by @​renovate-rancher[bot] in #​961
• install action: use /usr/local/bin by default by @​tashima42 in #​978

Full Changelog: rancher/ecm-distro-tools@v0.74.2...v0.74.3

v0.74.2

Compare Source

What's Changed

• fix ecm distro tools install path by @​tashima42 in #​973
• Add conditional to check if Auth is nil by @​rafaelbreno in #​974

Full Changelog: rancher/ecm-distro-tools@v0.74.1...v0.74.2

v0.74.1

Compare Source

What's Changed

• Add conditional to read GITHUB_TOKEN from env by @​rafaelbreno in #​969

Full Changelog: rancher/ecm-distro-tools@v0.74.0...v0.74.1

v0.74.0

Compare Source

What's Changed

• Add release stats cve command by @​rafaelbreno in #​941

Full Changelog: rancher/ecm-distro-tools@v0.73.2...v0.74.0

v0.73.2

Compare Source

What's Changed

• chore(deps): update github actions by @​renovate-rancher[bot] in #​955
• chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.32.20 by @​renovate-rancher[bot] in #​959

Full Changelog: rancher/ecm-distro-tools@v0.73.0...v0.73.2

v0.73.1

Compare Source

v0.73.0

Compare Source

v0.72.0

Compare Source

What's Changed

• add inspect button to redirect to sbom viewer by @​tashima42 in #​949
• chore(deps): update module github.com/go-git/go-git/v5 to v5.19.1 [security] by @​renovate-rancher[bot] in #​953
• chore(deps): update rancher/ecm-distro-tools action to v0.69.2 by @​renovate-rancher[bot] in #​954
• chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.32.18 by @​renovate-rancher[bot] in #​917

Full Changelog: rancher/ecm-distro-tools@v0.71.0...v0.72.0

v0.71.0

Compare Source

What's Changed

• Specify slsactl version to be able to consume desired version by @​furkatgofurov7 in #​940
• start code clean up and remove unused code by @​briandowns in #​939
• fix linter warnings and remove rke2_release command by @​tashima42 in #​944
• chore(deps): update golang.org/x dependencies by @​renovate-rancher[bot] in #​948
• chore(deps): update module github.com/google/go-containerregistry to v0.21.6 by @​renovate-rancher[bot] in #​945
• chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.101.0 by @​renovate-rancher[bot] in #​928
• chore(deps): update module github.com/masterminds/semver/v3 to v3.5.0 by @​renovate-rancher[bot] in #​920
• chore(deps): update github actions by @​renovate-rancher[bot] in #​921
• chore(deps): update module golang.org/x/crypto to v0.52.0 [security] by @​renovate-rancher[bot] in #​942
• chore(deps): update rancher/ecm-distro-tools action to v0.69.0 by @​renovate-rancher[bot] in #​950

Full Changelog: rancher/ecm-distro-tools@v0.70.0...v0.71.0

v0.70.0

Compare Source

What's Changed

• chore: bump slsactl to v0.1.33 by @​furkatgofurov7 in #​924
• Add Tools section in Prime Ribs page by @​rafaelbreno in #​933

New Contributors

• @​furkatgofurov7 made their first contribution in #​924

Full Changelog: rancher/ecm-distro-tools@v0.69.4...v0.70.0

v0.69.4

Compare Source

What's Changed

• chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.100.1 by @​renovate-rancher[bot] in #​918
• Add TrimSpace version by @​rafaelbreno in #​926

Full Changelog: rancher/ecm-distro-tools@v0.69.3...v0.69.4

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.