chore(deps): update github actions to v0.9.0, v0.4.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
bcgov/actions	action	minor	v0.8.0 → v0.9.0
bcgov/actions-openshift	workflow	minor	v0.3.2 → v0.4.0
bcgov/actions-openshift	action	minor	v0.3.2 → v0.4.0

---

Release Notes

bcgov/actions (bcgov/actions)

v0.9.0

Compare Source

What's Changed

• fix(ci): ncc in-job so lockfile PRs do not need committed dist by @​DerekRoberts in #​238
• docs: drop syntax and fork guides from the suite README by @​DerekRoberts in #​239
• chore(deps): lock file maintenance by @​renovate[bot] in #​236
• feat(workflow-notifier): comment on one open issue per title by @​DerekRoberts in #​241
• feat(image-tracker): opt-in tags input with guarded latest by @​DerekRoberts in #​244
• feat(scan-url): action to scan URL with ZAP and Nuclei by @​DerekRoberts in #​245
• chore(test-and-analyse): point package.json repository at bcgov/actions by @​DerekRoberts in #​250
• docs: move assistant rules to tool-neutral AGENTS.md by @​DerekRoberts in #​254
• chore(deps): update dependency bcgov/renovate-config to v2026.9.26 by @​renovate[bot] in #​257
• chore(deps): update sonarsource/sonarqube-scan-action digest to ba9859e by @​renovate[bot] in #​256
• feat(pr-validate): lint workflows with actionlint by @​DerekRoberts in #​259
• fix(test): expect the PR for the labeled image by @​DerekRoberts in #​260
• test(diff-triggers): assert against a fixture commit, not the PR's changes by @​DerekRoberts in #​255
• chore(pr-description-add): point package.json repository at bcgov/actions by @​DerekRoberts in #​261
• refactor(test-and-analyse): run the reporter on the Actions Node 24 runtime by @​DerekRoberts in #​262
• test(scan-url): scan quickstart frontend and backend together by @​DerekRoberts in #​263
• chore(deps): lock file maintenance by @​renovate[bot] in #​267
• chore(deps): update sonarsource/sonarqube-scan-action digest to d209202 by @​renovate[bot] in #​268
• ci(test): run test suite on pull requests only by @​DerekRoberts in #​275
• feat(builder): publish arm64 images as their own package by @​DerekRoberts in #​274
• feat(test-and-analyse): optional Semgrep scan by @​DerekRoberts in #​266
• feat(ghcr-cleanup): delete unused images by @​DerekRoberts in #​276
• docs(agents): README usage examples follow quickstart-openshift by @​DerekRoberts in #​277
• fix(pr-validate): accept ubuntu-26.04 and caller runner labels in actionlint by @​DerekRoberts in #​278

Full Changelog: bcgov/actions@v0.7.1...v0.9.0

bcgov/actions-openshift (bcgov/actions-openshift)

v0.4.0

Compare Source

What's Changed

• fix(oc-runner): verify TLS for token request and log runner IP on login failure by @​DerekRoberts in #​62
• fix(security): pass inputs to scripts through env by @​DerekRoberts in #​63
• ci: probe GitHub runner reachability to OpenShift API and router by @​DerekRoberts in #​55
• feat(oc-runner): fail fast with a clear message when the runner IP is blocked by @​DerekRoberts in #​65
• feat(crunchy): optional values_file, override inputs and TLS passthrough route by @​DerekRoberts in #​67
• chore: move workstation scripts to bcgov/devops-scripts by @​DerekRoberts in #​66
• docs(route-tls): add a workflow_dispatch example by @​DerekRoberts in #​68
• feat(crunchy): stop after helm when dry_run is set by @​DerekRoberts in #​70
• test(oc-runner): cover commands failures and verbose mode by @​DerekRoberts in #​71
• feat(route-tls): record dry_run on the workflow summary by @​DerekRoberts in #​72
• feat(route-tls): sate dry run in logs, verify route access by @​DerekRoberts in #​73
• feat(route-tls): fail the apply unless the live certificate matches by @​DerekRoberts in #​74
• fix(crunchy): deploy the bundled chart unless a repository is set by @​DerekRoberts in #​75
• chore: Configure Renovate by @​renovate[bot] in #​83
• chore(deps): update dependency bcgov/renovate-config to v2026 by @​renovate[bot] in #​85
• chore(deps): update github actions by @​renovate[bot] in #​84
• refactor(ci): drop action-get-pr from the deployer workflow by @​DerekRoberts in #​77
• chore(deps): update github actions to v8.0.1, v7.0.1 (major) by @​renovate[bot] in #​87
• docs(route-tls): document standalone workflow architecture and secret upload by @​DerekRoberts in #​88
• docs: add AGENTS.md with repository facts by @​DerekRoberts in #​79
• feat(route-tls): fail when another route already owns the host by @​DerekRoberts in #​82
• chore(deps): update github actions to 13, 26.04 (major) by @​renovate[bot] in #​90
• fix(deployer): fail on non-AlreadyExists errors with overwrite: false by @​DerekRoberts in #​89
• feat(crunchy): harden crunchy action defaults, scripts, and output contracts by @​DerekRoberts in #​92
• ci(probe): record runner reachability and add a weekly IP-health report by @​DerekRoberts in #​93
• feat(route-tls): check CA chain order and print each check by @​DerekRoberts in #​94
• test(route-tls): generate a real CA chain and failing variants in CI by @​DerekRoberts in #​96
• docs(agents): README usage examples follow quickstart-openshift by @​DerekRoberts in #​97
• fix(ci): stop PR close runs cancelling the push-to-main run by @​DerekRoberts in #​98
• fix(ci): skip Test Route TLS unless its paths change by @​DerekRoberts in #​102
• docs: point READMEs at actions-openshift instead of retired repos by @​DerekRoberts in #​104
• fix(oc-runner): only report a timeout when the timeout input fired by @​DerekRoberts in #​103
• feat(cert-expiry): read-only TLS certificate expiry check action by @​DerekRoberts in #​108
• feat(image-import): import a GHCR image into the namespace ImageStream by @​DerekRoberts in #​100
• fix(oc-runner): titled annotation and blocked output when the runner IP is blocked by @​DerekRoberts in #​109
• feat(pg-upgrade): verified PostgreSQL/PostGIS major upgrades by @​DerekRoberts in #​106

New Contributors

• @​renovate[bot] made their first contribution in #​83

Full Changelog: bcgov/actions-openshift@v0.3.2...v0.4.0

---

Configuration

📅 Schedule: (in timezone America/Vancouver)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.