chore(deps): update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	patch	v5.0.1 → v5.0.3
actions/checkout	action	patch	v6.0.1 → v6.0.2
actions/setup-node	action	minor	v6.1.0 → v6.2.0
jdx/mise-action	action	minor	v3.5.1 → v3.6.1
zizmorcore/zizmor-action	action	minor	v0.3.0 → v0.5.0

---

Release Notes

actions/cache (actions/cache)

v5.0.3

Compare Source

What's Changed

• Bump @actions/cache to v5.0.5 (Resolves: https://github.com/actions/cache/security/dependabot/33)
• Bump @actions/core to v2.0.3

Full Changelog: actions/cache@v5...v5.0.3

v5.0.2

Compare Source

actions/checkout (actions/checkout)

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

actions/setup-node (actions/setup-node)

v6.2.0

Compare Source

jdx/mise-action (jdx/mise-action)

v3.6.1

Compare Source

What's Changed

• Revert "fix(cache): isolate cache keys per working_directory in monorepos" by @​jdx in #​364
• chore: release v3.6.1 by @​mise-en-dev in #​365

Full Changelog: jdx/mise-action@v3.6.0...v3.6.1

v3.6.0

Compare Source

What's Changed

• chore(deps): update dependency prettier to v3.7.1 by @​renovate[bot] in #​331
• chore(deps): update github/codeql-action digest to 497990d by @​renovate[bot] in #​324
• chore(deps): update dependency typescript-eslint to v8.48.1 by @​renovate[bot] in #​332
• chore(deps): update dependency @​types/handlebars to v4.1.0 by @​renovate[bot] in #​314
• chore(deps): update dependency @​eslint/eslintrc to v3.3.3 by @​renovate[bot] in #​333
• chore(deps): lock file maintenance by @​renovate[bot] in #​336
• chore(deps): lock file maintenance by @​renovate[bot] in #​338
• fix: use mise_dir input when specified by @​jdx in #​339
• feat: add option to disable shims in PATH by @​jdx in #​340
• fix: pass environment variables to mise commands by @​jdx in #​341
• chore(deps): lock file maintenance by @​renovate[bot] in #​344
• chore(deps): update github/codeql-action digest to 45c3735 by @​renovate[bot] in #​346
• chore(deps): lock file maintenance by @​renovate[bot] in #​348
• chore(deps): update actions/checkout action to v6 by @​renovate[bot] in #​350
• chore(deps): lock file maintenance by @​renovate[bot] in #​352
• docs: fix description for mise_toml input by @​quad in #​351
• fix: make mise self-update output visible in logs by @​nikobockerman in #​355
• chore(deps): update actions/setup-node action to v6 by @​renovate[bot] in #​356
• chore(deps): lock file maintenance by @​renovate[bot] in #​358
• chore(deps): update actions/setup-node digest to 6044e13 by @​renovate[bot] in #​361
• fix(cache): isolate cache keys per working_directory in monorepos by @​chadxz in #​360
• chore(deps): update github/codeql-action digest to 4bdb89f by @​renovate[bot] in #​362
• chore(deps): update dependency @​types/handlebars to v4.1.0 by @​renovate[bot] in #​349
• chore(deps): update actions/upload-artifact action to v6 by @​renovate[bot] in #​357
• chore: release v3.6.0 by @​mise-en-dev in #​342

New Contributors

• @​quad made their first contribution in #​351
• @​nikobockerman made their first contribution in #​355
• @​chadxz made their first contribution in #​360

Full Changelog: jdx/mise-action@v3.5.1...v3.6.0

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.5.0

Compare Source

What's Changed

• Expose output-file as an output when advanced-security: true by @​unlobito in #​87

New Contributors

• @​unlobito made their first contribution in #​87

Full Changelog: zizmorcore/zizmor-action@v0.4.1...v0.5.0

v0.4.1

Compare Source

This version fixes an error in the 0.4.0 release that prevented non-relative use
of the action.

What's Changed

• Fix version file path by @​woodruffw in #​83

Full Changelog: zizmorcore/zizmor-action@v0.4.0...v0.4.1

v0.4.0

Compare Source

This new version of zizmor-action brings two major changes:

• The new fail-on-no-inputs option can be used to control whether
  zizmor-action fails if no inputs were collected by zizmor. The default
  remains true, reflecting the pre-existing behavior.

• The action's use of the official zizmor Docker images is now fully
  hash-checked internally, preventing accidental or malicious modification
  to the images. This also means that subsequent releases of zizmor
  will induce a release of this action, rather than the action always picking
  up the latest version by default.

What's Changed

• docs: extended permissions required for internal repos by @​AntoineSebert in #​61
• docs: clarify description of "token" to indicate it is only used for online audits by @​rmuir in #​63
• Hash-check zizmor Docker images by @​woodruffw in #​68
• Add fail-on-no-inputs option by @​woodruffw in #​67

New Contributors

• @​AntoineSebert made their first contribution in #​61
• @​rmuir made their first contribution in #​63

Full Changelog: zizmorcore/zizmor-action@v0.3.0...v0.4.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.