chore(deps): update github actions

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	patch	v5.0.4 → v5.0.5
actions/checkout	action	patch	v6.0.2 → v6.0.3
actions/upload-artifact	action	patch	v7.0.0 → v7.0.1
docker/setup-buildx-action	action	minor	v4 → v4.1.0
release-plz/action (changelog)	action	digest	1528104 → 064f4d1
rust-lang/josh-sync (changelog)	action	digest	8970a6e → edfc69c
taiki-e/install-action	action	minor	v2.79.8 → v2.81.3
zizmorcore/zizmor-action	action	patch	v0.5.2 → v0.5.6

---

Release Notes

actions/cache (actions/cache)

v5.0.5

Compare Source

What's Changed

• Update ts-http-runtime dependency by @​yacaovsnc in #​1747

Full Changelog: actions/cache@v5...v5.0.5

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

actions/upload-artifact (actions/upload-artifact)

v7.0.1

Compare Source

What's Changed

• Update the readme with direct upload details by @​danwkennedy in #​795
• Readme: bump all the example versions to v7 by @​danwkennedy in #​796
• Include changes in typespec/ts-http-runtime 0.3.5 by @​yacaovsnc in #​797

Full Changelog: actions/upload-artifact@v7...v7.0.1

docker/setup-buildx-action (docker/setup-buildx-action)

v4.1.0

Compare Source

• Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in #​489
• Bump brace-expansion from 1.1.12 to 5.0.6 in #​547 #​508
• Bump fast-xml-builder from 1.0.0 to 1.2.0 in #​540
• Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​496
• Bump flatted from 3.3.3 to 3.4.2 in #​499
• Bump glob from 10.3.12 to 13.0.6 in #​495
• Bump handlebars from 4.7.8 to 4.7.9 in #​504
• Bump lodash from 4.17.23 to 4.18.1 in #​523
• Bump picomatch from 4.0.3 to 4.0.4 in #​503
• Bump postcss from 8.5.6 to 8.5.10 in #​537
• Bump tar from 6.2.1 to 7.5.15 in #​545
• Bump undici from 6.23.0 to 6.25.0 in #​492
• Bump vite from 7.3.1 to 7.3.2 in #​520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

taiki-e/install-action (taiki-e/install-action)

v2.81.3: 2.81.3

Compare Source

• Update vacuum@latest to 0.28.3.

• Update uv@latest to 0.11.18.

• Update trivy@latest to 0.71.0.

v2.81.2: 2.81.2

Compare Source

• Update mise@latest to 2026.5.18.

• Update cargo-semver-checks@latest to 0.48.0.

v2.81.1: 2.81.1

Compare Source

• Update cargo-no-dev-deps@latest to 0.2.24.

• Update cargo-hack@latest to 0.6.45.

v2.81.0: 2.81.0

Compare Source

• Support convco. (#​1831, thanks @​graelo)

• Support docgarden (#​1830, thanks @​jesse-black)

• Update vacuum@latest to 0.28.0.

• Update cargo-binstall@latest to 1.19.1.

v2.80.0: 2.80.0

Compare Source

• Support kingfisher. (#​1874, thanks @​SAY-5)

v2.79.15: 2.79.15

Compare Source

• Update typos@latest to 1.47.0.

• Update wasm-tools@latest to 1.251.0.

• Update vacuum@latest to 0.27.2.

• Update uv@latest to 0.11.17.

• Update tombi@latest to 1.1.1.

• Update mise@latest to 2026.5.16.

v2.79.14: 2.79.14

Compare Source

• Update vacuum@latest to 0.27.0.

• Update cargo-deny@latest to 0.19.8.

v2.79.13: 2.79.13

Compare Source

• Update gungraun-runner@latest to 0.19.1.

• Update biome@latest to 2.4.16.

v2.79.12: 2.79.12

Compare Source

• Update prek@latest to 0.4.3.

• Remove uses of crates.io API, which potentially cases 403 error.

v2.79.11: 2.79.11

Compare Source

• Update vacuum@latest to 0.26.8.

• Update cargo-nextest@latest to 0.9.137.

v2.79.10: 2.79.10

Compare Source

• Update tombi@latest to 1.1.0.

• Update prek@latest to 0.4.2.

• Update editorconfig-checker@latest to 3.7.0.

v2.79.9: 2.79.9

Compare Source

• Update vacuum@latest to 0.26.7.

• Update tombi@latest to 1.0.0.

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.5.6

Compare Source

• 1.25.2 is now available via the action
• 1.25.2 is now the default version of zizmor used by the action

v0.5.5

Compare Source

This is a no-op release.

v0.5.4

Compare Source

• 1.25.0 is now available via the action
• 1.25.0 is now the default version of zizmor used by the action

v0.5.3

Compare Source

What's Changed

• 1.24.0 and 1.24.1 are now available via the action
• 1.24.1 is now the default version of zizmor used by the action

Full Changelog: zizmorcore/zizmor-action@v0.5.2...v0.5.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 12:59 AM, on day 1 of the month (* 0 1 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.