chore(deps): update github-actions dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	digest	b4ffde6 -> 11bd719
actions/upload-artifact	action	digest	5d5d22a -> b4b15b8
docker/login-action	action	digest	e92390c -> 9780b0c
docker/setup-buildx-action	action	digest	2b51285 -> c47758b
docker/setup-qemu-action	action	digest	6882732 -> 49b3bc8
reviewdog/action-yamllint	action	minor	v1.12.0 -> v1.19.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

reviewdog/action-yamllint (reviewdog/action-yamllint)

v1.19.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.20.2 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/44

Full Changelog: reviewdog/action-yamllint@v1.18.0...v1.19.0

v1.18.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.20.1 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/41

Full Changelog: reviewdog/action-yamllint@v1.17.0...v1.18.0

v1.17.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.19.0 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/40

Full Changelog: reviewdog/action-yamllint@v1.16.0...v1.17.0

v1.16.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.18.1 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/39

Full Changelog: reviewdog/action-yamllint@v1.15.0...v1.16.0

v1.15.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.17.5 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/38

Full Changelog: reviewdog/action-yamllint@v1.14.0...v1.15.0

v1.14.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.17.4 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/37

Full Changelog: reviewdog/action-yamllint@v1.13.0...v1.14.0

v1.13.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.17.3 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/36

Full Changelog: reviewdog/action-yamllint@v1.12.0...v1.13.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[village-labs-bot]

upbound/configuration-gcp-gke #49

Change Summary

• Updating GitHub Actions dependencies to their latest secure versions across multiple workflow files (ci.yaml, tag.yml, yamllint.yaml)
• Version updates for core infrastructure components including QEMU setup, Docker Buildx, GitHub checkout action, and artifact handling
• Upgrade of yamllint action from v1.12.0 to v1.19.0 with improved functionality

Potential Vulnerabilities

• File: .github/workflows/ci.yaml:42
• Code: uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3
• Explanation: While updating GitHub Actions is generally good for security, pinning to specific commit hashes still leaves a small vulnerability window if the commit hash becomes compromised. Consider implementing SHA-256 digest verification for critical infrastructure components.

Code Smells

None identified in this change set. The modifications are straightforward version updates with consistent formatting and clear commit hash references.

Debug Logs

None identified in the provided changes.

Unintended Consequences

• File: .github/workflows/ci.yaml:6-70

• Explanation: The update to newer versions of GitHub Actions could potentially break existing workflows if there are breaking changes in the newer versions, particularly the significant version jump in yamllint from v1.12.0 to v1.19.0. Recommend thorough testing of the CI pipeline after these changes.

• File: .github/workflows/yamllint.yaml:7-13

• Code: uses: reviewdog/action-yamllint@e09f07780388032a624e9eb44a23fd1bbb4052cc # v1.19.0

• Explanation: The substantial version jump in yamllint action might introduce stricter linting rules that could cause previously passing YAML files to fail. This could temporarily block merges until YAML files are updated to meet new standards.

Risk Score: 3

The changes are primarily maintenance updates to GitHub Actions dependencies. While any infrastructure change carries inherent risk, these updates are well-documented and use specific commit hashes. The main risks are potential CI pipeline disruptions and stricter YAML linting requirements. The relatively low risk score reflects the nature of the changes as maintenance rather than functional modifications.

[kaessert]

/test-examples