chore(deps): update github-actions dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	digest	b4ffde6 -> 11bd719
actions/upload-artifact	action	digest	5d5d22a -> b4b15b8
docker/login-action	action	digest	e92390c -> 9780b0c
docker/setup-buildx-action	action	digest	d70bba7 -> c47758b
docker/setup-qemu-action	action	digest	6882732 -> 49b3bc8
reviewdog/action-yamllint	action	minor	v1.12.0 -> v1.19.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

reviewdog/action-yamllint (reviewdog/action-yamllint)

v1.19.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.20.2 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/44

Full Changelog: reviewdog/action-yamllint@v1.18.0...v1.19.0

v1.18.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.20.1 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/41

Full Changelog: reviewdog/action-yamllint@v1.17.0...v1.18.0

v1.17.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.19.0 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/40

Full Changelog: reviewdog/action-yamllint@v1.16.0...v1.17.0

v1.16.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.18.1 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/39

Full Changelog: reviewdog/action-yamllint@v1.15.0...v1.16.0

v1.15.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.17.5 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/38

Full Changelog: reviewdog/action-yamllint@v1.14.0...v1.15.0

v1.14.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.17.4 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/37

Full Changelog: reviewdog/action-yamllint@v1.13.0...v1.14.0

v1.13.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.17.3 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/36

Full Changelog: reviewdog/action-yamllint@v1.12.0...v1.13.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[village-labs-bot]

upbound/configuration-gcp-database #46

Change Summary

• Updated multiple GitHub Actions dependency versions across CI workflow files, including QEMU setup, Docker Buildx, Checkout action, and Yamllint
• Upgraded the GitHub Actions Upload Artifact and Docker Login actions to newer versions
• Updated the GitHub Actions Yamllint reviewer to version 1.19.0 from 1.12.0

Potential Vulnerabilities

• File: .github/workflows/ci.yaml:67
• Code: uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
• Explanation: While this is a version bump, any action involving Docker registry authentication should be carefully reviewed. The specific hash should be verified against the official repository to ensure it hasn't been compromised.

Code Smells

• File: .github/workflows/ci.yaml:33-75
• Code: Multiple sequential GitHub Action version updates
• Explanation: While updating dependencies is important, doing multiple action updates in a single PR can make it harder to isolate issues if one of the updates causes problems. Consider splitting these into separate PRs for better isolation of changes.

Debug Logs

No debug logs were identified in this change set.

Unintended Consequences

• File: .github/workflows/yamllint.yaml:10

• Code: uses: reviewdog/action-yamllint@e09f07780388032a624e9eb44a23fd1bbb4052cc # v1.19.0

• Explanation: Major version jump from 1.12.0 to 1.19.0 could introduce breaking changes in the yamllint configuration or reporting format. Should verify the changelog for any breaking changes between these versions.

• File: .github/workflows/ci.yaml:36-38

• Code: uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 with: platforms: all

• Explanation: The "platforms: all" setting combined with a new QEMU version could potentially introduce support for new platforms that haven't been tested with the existing configuration.

Risk Score: 4

The changes are primarily version updates to well-maintained GitHub Actions, which generally have good backward compatibility. However, the multiple simultaneous updates and the significant version jump in the yamllint action warrant careful testing. The risk is moderate due to these being CI/CD changes that could affect the build and review process if issues arise.

[kaessert]

/test-examples