chore(deps): update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v4.1.7 -> v4.2.1
actions/setup-java	action	minor	v4.3.0 -> v4.4.0
actions/upload-artifact	action	patch	v4.4.0 -> v4.4.3
github/codeql-action	action	patch	v3.26.7 -> v3.26.13
miracum/.github	action	patch	v1.12.3 -> v1.12.5

---

Release Notes

actions/checkout (actions/checkout)

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

actions/setup-java (actions/setup-java)

v4.4.0

Compare Source

What's Changed

Add-ons :

• Add support for Oracle GraalVM by @​fniephaus in https://github.com/actions/setup-java/pull/501

steps:
 - name: Checkout
   uses: actions/checkout@v4
 - name: Setup-java
   uses: actions/setup-java@v4
   with:
     distribution: 'graalvm'
     java-version: '21'

• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/setup-java/pull/684

Bug fixes :

• Add architecture to cache key by @​Zxilly in https://github.com/actions/setup-java/pull/664
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.
• Resolve check failures by @​aparnajyothi-y in https://github.com/actions/setup-java/pull/687

New Contributors

• @​Jcambass made their first contribution in https://github.com/actions/setup-java/pull/684
• @​Zxilly made their first contribution in https://github.com/actions/setup-java/pull/664

Full Changelog: actions/setup-java@v4...v4.4.0

actions/upload-artifact (actions/upload-artifact)

v4.4.3

Compare Source

What's Changed

• Undo indirect dependency updates from #​627 by @​joshmgross in https://github.com/actions/upload-artifact/pull/632

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

• Bump @actions/artifact to 2.1.11 by @​robherley in https://github.com/actions/upload-artifact/pull/627
  • Includes fix for relative symlinks not resolving properly

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed

• Add a section about hidden files by @​joshmgross in https://github.com/actions/upload-artifact/pull/607
• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/upload-artifact/pull/621
• Update @​actions/artifact to latest version, includes symlink and timeout fixes by @​robherley in https://github.com/actions/upload-artifact/pull/625

New Contributors

• @​Jcambass made their first contribution in https://github.com/actions/upload-artifact/pull/621

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

github/codeql-action (github/codeql-action)

v3.26.13

Compare Source

v3.26.12

Compare Source

v3.26.11

Compare Source

v3.26.10

Compare Source

v3.26.9

Compare Source

v3.26.8

Compare Source

miracum/.github (miracum/.github)

v1.12.5

Compare Source

Miscellaneous Chores

• deps: updated default java and .net version for codeql (#​88) (1748b6a)

v1.12.4

Compare Source

Miscellaneous Chores

• deps: update all non-major dependencies (#​82) (1a9180b)
• deps: update dependency ubuntu to v24 (#​87) (0c1519a)
• deps: update github-actions (#​83) (f2019bb)
• deps: update github-actions (#​86) (b86af08)

---

Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	3		0	0.02s
✅ GROOVY	npm-groovy-lint	2		0	9.49s
✅ JAVA	checkstyle	4		0	5.11s
✅ JSON	jsonlint	1		0	0.11s
✅ JSON	prettier	1		0	0.25s
✅ JSON	v8r	1		0	2.78s
✅ MARKDOWN	markdownlint	2		0	0.22s
✅ MARKDOWN	markdown-table-formatter	2		0	0.15s
✅ REPOSITORY	checkov	yes		no	13.2s
✅ REPOSITORY	dustilock	yes		no	0.0s
✅ REPOSITORY	gitleaks	yes		no	0.06s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	13.06s
✅ REPOSITORY	kics	yes		no	2.48s
✅ REPOSITORY	secretlint	yes		no	0.85s
✅ REPOSITORY	syft	yes		no	1.62s
✅ REPOSITORY	trivy	yes		no	6.14s
✅ REPOSITORY	trivy-sbom	yes		no	0.93s
✅ REPOSITORY	trufflehog	yes		no	3.68s
✅ XML	xmllint	1		0	0.02s
✅ YAML	prettier	4		0	0.56s
✅ YAML	v8r	4		0	6.85s
✅ YAML	yamllint	4		0	0.57s

See detailed report in MegaLinter reports

You could have the same capabilities but better runtime performances if you use a MegaLinter flavor:

• oxsecurity/megalinter/flavors/[email protected] (83 linters)

MegaLinter is graciously provided by