Update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
actions/checkout (changelog)	action	digest	8e8c483 → de0fac2
actions/setup-go (changelog)	action	digest	7a3fe6c → 4a36011
anchore/sbom-action (changelog)	action	digest	f325610 → e22c389
azure/setup-helm (changelog)	action	digest	b9e5190 → 1a275c3
docker/build-push-action (changelog)	action	digest	471d1dc → 10e90e3
docker/login-action (changelog)	action	digest	74a5d14 → c94ce9f
docker/setup-buildx-action (changelog)	action	digest	b5ca514 → 8d2750c
docker/setup-qemu-action (changelog)	action	digest	2910929 → c7c5346
fossas/fossa-action (changelog)	action	digest	65a5a12 → ff70fe9
golangci/golangci-lint	uses-with	minor	v2.8.0 → v2.12.1
helm/kind-action	action	minor	v1.12.0 → v1.14.0
softprops/action-gh-release (changelog)	action	digest	da05d55 → 3bb1273
trufflesecurity/trufflehog	action	pinDigest	→ 90ca685

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

golangci/golangci-lint (golangci/golangci-lint)

v2.12.1

Compare Source

Released on 2026-05-01

1. Linters bug fixes
   • gomodguard_v2: fix panic with migration suggestion
2. Misc.
   • fix install.sh script (if you are still using an URL based on the branch master, please update to use https://golangci-lint.run/install.sh)

v2.12.0

Compare Source

Released on 2026-05-01

1. New linters
   • Add clickhouselint linter https://github.com/ClickHouse/clickhouse-go-linter
2. Linters new features or changes
   • dupl: from f665c8d to c99c5cf (extended detection)
   • funcorder: from 0.5.0 to 0.6.0 (new option: function)
   • goconst: add an option to ignore strings from tests
   • goconst: from 1.8.2 to 1.10.0 (extended detection)
   • gomodguard_v2: from 1.4.1 to 2.1.0 (major version with new configuration)
   • gosec: from 619ce21 to 2.26.1 (new checks: G124, G708, G709, G710)
   • govet: add inline analyzer
   • makezero: from 2.1.0 to 2.2.1 (support slice type aliases)
   • paralleltest: expose checkcleanup option
   • sloglint: from 0.11.1 to 0.12.0 (new options: allowed-keys, custom-funcs)
   • wsl_v5: from 5.6.0 to 5.8.0 (new option: cuddle-max-statements; new checks: after-decl, after-defer, after-expr, after-go, cuddle-group)
3. Linters bug fixes
   • forbidigo: from 2.3.0 to 2.3.1
   • godot: from 1.5.4 to 1.5.6
   • govet-modernize: from 0.43.0 to 0.44.0
   • ireturn: from 0.4.0 to 0.4.1
   • rowserrcheck: from 1.1.1 to c5f79b8
4. Misc.
   • Decrease cache entropy
   • Embed the JSON schema in the binary
   • Filter env vars when cloning the repository with the custom command

v2.11.4

Compare Source

Released on 2026-03-22

1. Linters bug fixes
   • govet-modernize: from 0.42.0 to 0.43.0
   • noctx: from 0.5.0 to 0.5.1
   • sqlclosecheck: from 0.5.1 to 0.6.0

v2.11.3

Compare Source

Released on 2026-03-10

1. Linters bug fixes
   • gosec: from v2.24.7 to 619ce21

v2.11.2

Compare Source

Released on 2026-03-07

1. Fixes
   • fmt: fix error when using the fmt command with explicit paths.

v2.11.1

Compare Source

Released on 2026-03-06

Due to an error related to AUR, some artifacts of the v2.11.0 release have not been published.

This release contains the same things as v2.11.0.

v2.11.0

Compare Source

Released on 2026-03-06

1. Linters new features or changes
   • errcheck: from 1.9.0 to 1.10.0 (exclude crypto/rand.Read by default)
   • gosec: from 2.23.0 to 2.24.6 (new rules: G113, G118, G119, G120, G121, G122, G123, G408, G707)
   • noctx: from 0.4.0 to 0.5.0 (new detection: httptest.NewRequestWithContext)
   • prealloc: from 1.0.2 to 1.1.0
   • revive: from 1.14.0 to 1.15.0 (⚠️ Breaking change: package-related checks moved from var-naming to a new rule package-naming)
2. Linters bug fixes
   • gocognit: from 1.2.0 to 1.2.1
   • gosec: from 2.24.6 to 2.24.7
   • unqueryvet: from 1.5.3 to 1.5.4

v2.10.1

Compare Source

Released on 2026-02-17

1. Fixes
   • buildssa panic

v2.10.0

Compare Source

Released on 2026-02-17

1. Linters new features or changes
   • ginkgolinter: from 0.22.0 to 0.23.0
   • gosec: from 2.22.11 to 2.23.0 (new rules: G117, G602, G701, G702, G703, G704, G705, G706)
   • staticcheck: from 0.6.1 to 0.7.0
2. Linters bug fixes
   • godoclint: from 0.11.1 to 0.11.2

v2.9.0

Compare Source

Released on 2026-02-10

1. Enhancements
   • 🎉 go1.26 support
2. Linters new features or changes
   • arangolint: from 0.3.1 to 0.4.0 (new rule: detect potential query injections)
   • ginkgolinter: from 0.21.2 to 0.22.0 (support for wrappers)
   • golines: from 0.14.0 to 0.15.0
   • misspell: from 0.7.0 to 0.8.0
   • unqueryvet: from 1.4.0 to 1.5.3 (new options: check-n1, check-sql-injection, check-tx-leaks, allow, custom-rules)
   • wsl: from 5.3.0 to 5.6.0 (new rule: after-block)
3. Linters bug fixes
   • modernize: from 0.41.0 to 0.42.0
   • prealloc: from 1.0.1 to 1.0.2
   • protogetter: from 0.3.18 to 0.3.20
4. Misc.
   • Log information about files when configuration verification
   • Emit an error when no linters enabled
   • Do not collect VCS information when loading code

helm/kind-action (helm/kind-action)

v1.14.0

Compare Source

What's Changed

• Bump actions/checkout from 5.0.0 to 6.0.1 by @​dependabot[bot] in #​153
• bump kind to v0.31.0 and k8s to v1.35.0 by @​MrFreezeex in #​155
• Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by @​dependabot[bot] in #​156

New Contributors

• @​MrFreezeex made their first contribution in #​155

Full Changelog: helm/kind-action@v1...v1.14.0

v1.13.0

Compare Source

What's Changed

• chore: verify sha256sum of kubectl by @​felix-kaestner in #​134
• Load GITHUB_PATH in PATH to use correct binaries when creating registry by @​gotha in #​133
• feat: Add cloud provider by @​waltermity in #​135
• chore: bump kind to v0.29.0 by @​pmalek in #​144
• Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​145
• bug: respect 'install_only' action input value by @​mszostok in #​147
• bump kind and kubectl and also nodejs by @​cpanato in #​150

New Contributors

• @​felix-kaestner made their first contribution in #​134
• @​gotha made their first contribution in #​133
• @​waltermity made their first contribution in #​135
• @​pmalek made their first contribution in #​144
• @​mszostok made their first contribution in #​147

Full Changelog: helm/kind-action@v1...v1.13.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.