Update github-actions deps

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
anchore/sbom-action	action	patch	v0.20.4 -> v0.20.5
github/codeql-action	action	patch	v3.29.9 -> v3.29.10
goreleaser/goreleaser-action	action	minor	v6.3.0 -> v6.4.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

anchore/sbom-action (anchore/sbom-action)

v0.20.5

Compare Source

Changes in v0.20.5

• Update Syft to v1.31.0 (#​531)

github/codeql-action (github/codeql-action)

v3.29.10

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.10 - 18 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v6.4.0

Compare Source

What's Changed

• ci: set contents read as default workflow permissions by @​crazy-max in https://github.com/goreleaser/goreleaser-action/pull/494
• fix: support .config directory for goreleaser config files by @​haya14busa in https://github.com/goreleaser/goreleaser-action/pull/500
• chore(deps): bump semver from 7.7.1 to 7.7.2 by @​dependabot[bot] inhttps://github.com/goreleaser/goreleaser-action/pull/4955
• chore(deps): bump brace-expansion from 1.1.11 to 1.1.12 by @​dependabot[bot] inhttps://github.com/goreleaser/goreleaser-action/pull/4988
• fix: do not get releases.json if version is specific by @​caarlos0 in https://github.com/goreleaser/goreleaser-action/pull/502
• chore(deps): bump undici from 5.28.5 to 5.29.0 by @​dependabot[bot] inhttps://github.com/goreleaser/goreleaser-action/pull/4966
• feat: retry downloading releases json by @​caarlos0 in https://github.com/goreleaser/goreleaser-action/pull/503

New Contributors

• @​haya14busa made their first contribution in https://github.com/goreleaser/goreleaser-action/pull/500

Full Changelog: goreleaser/goreleaser-action@v6.3.0...v6.4.0

---

Configuration

📅 Schedule: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 87.61%. Comparing base (dd957e4) to head (b707149).
⚠️ Report is 10 commits behind head on main.

❌ Your project status has failed because the head coverage (87.61%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #13662      +/-   ##
==========================================
- Coverage   87.67%   87.61%   -0.07%     
==========================================
  Files         632      632              
  Lines       39697    39697              
==========================================
- Hits        34806    34782      -24     
- Misses       3648     3666      +18     
- Partials     1243     1249       +6     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.