chore(deps): update all actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v6.0.0 → v6.1.0
appleboy/ssh-action	action	patch	v1.2.3 → v1.2.5
codecov/codecov-action	action	minor	v7.0.0 → v7.1.1
docker/build-push-action	action	minor	v6.18.0 → v6.19.2
docker/login-action	action	minor	v3.6.0 → v3.7.0
docker/setup-buildx-action	action	minor	v3.11.1 → v3.12.0
getsentry/action-release	action	minor	v3.4.0 → v3.7.0

---

Release Notes

actions/checkout (actions/checkout)

v6.1.0

Compare Source

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

v6.0.2

Compare Source

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in #​2356

v6.0.1

Compare Source

• Add worktree support for persist-credentials includeIf by @​ericsciple in #​2327

appleboy/ssh-action (appleboy/ssh-action)

v1.2.5

Compare Source

Changelog

Refactor

• 0ff4204: refactor: streamline output handling for GITHUB_OUTPUT in workflows (#​404) (@​appleboy)

Documentation updates

• 23bd972: docs: update README and assets for new SSH agent workflow (@​appleboy)
• 8e460a2: docs: improve documentation table formatting for output descriptions (@​appleboy)

v1.2.4

Compare Source

Changelog

Enhancements

• 4e3535e: chore: bump default DRONE_SSH_VERSION to 1.8.2 (@​appleboy)

Build process updates

• 823bd89: ci: trigger GitHub Actions workflows only on version tags (@​appleboy)

Documentation updates

• 652a0be: docs: update CI documentation and workflow references (@​appleboy)
• f6208e0: docs: document and demonstrate capturing and using command output (@​appleboy)

codecov/codecov-action (codecov/codecov-action)

v7.1.1

Compare Source

v7.1.0

Compare Source

docker/build-push-action (docker/build-push-action)

v6.19.2

Compare Source

• Preserve port in GIT_AUTH_TOKEN host by @​crazy-max in #​1458

Full Changelog: docker/build-push-action@v6.19.1...v6.19.2

v6.19.1

Compare Source

• Derive GIT_AUTH_TOKEN host from GitHub server URL by @​crazy-max in #​1456

Full Changelog: docker/build-push-action@v6.19.0...v6.19.1

v6.19.0

Compare Source

• Scope default git auth token to github.com by @​crazy-max in #​1451
• Bump brace-expansion from 1.1.11 to 1.1.12 in #​1396
• Bump form-data from 2.5.1 to 2.5.5 in #​1391
• Bump js-yaml from 3.14.1 to 3.14.2 in #​1429
• Bump lodash from 4.17.21 to 4.17.23 in #​1446
• Bump tmp from 0.2.3 to 0.2.4 in #​1398
• Bump undici from 5.28.4 to 5.29.0 in #​1397

Full Changelog: docker/build-push-action@v6.18.0...v6.19.0

docker/login-action (docker/login-action)

v3.7.0

Compare Source

• Add scope input to set scopes for the authentication token by @​crazy-max in #​912
• Add support for AWS European Sovereign Cloud ECR by @​dphi in #​914
• Ensure passwords are redacted with registry-auth input by @​crazy-max in #​911
• build(deps): bump lodash from 4.17.21 to 4.17.23 in #​915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

docker/setup-buildx-action (docker/setup-buildx-action)

v3.12.0

Compare Source

• Deprecate install input by @​crazy-max in #​455
• Bump @​docker/actions-toolkit from 0.62.1 to 0.63.0 in #​434
• Bump brace-expansion from 1.1.11 to 1.1.12 in #​436
• Bump form-data from 2.5.1 to 2.5.5 in #​432
• Bump undici from 5.28.4 to 5.29.0 in #​435

Full Changelog: docker/setup-buildx-action@v3.11.1...v3.12.0

getsentry/action-release (getsentry/action-release)

v3.7.0: 3.7.0

Compare Source

New Features ✨

• (sentry-cli) Upgrade to 2.58.6 by @​szokeasaurusrex in #​323

v3.6.1: 3.6.1

Compare Source

Bug Fixes 🐛

• Prevent shell injection in build workflow by @​fix-it-felix-sentry in #​319

Documentation 📚

• Update SENTRY_AUTH_TOKEN reference in README by @​angryfoxx in #​320

Internal Changes 🔧

• (agents) Add dotagents by @​andreiborza in #​314
• (sentry-cli) Upgrade to 2.58.6 by @​szokeasaurusrex in #​322
• Remove changelog preview by @​andreiborza in #​316

v3.6.0: 3.6.0

Compare Source

Internal Changes 🔧

Deps

• Bump flatted from 3.2.9 to 3.4.2 by @​dependabot in #​309
• Bump picomatch from 2.3.1 to 2.3.2 by @​dependabot in #​311
• Bump minimatch from 3.1.2 to 3.1.5 by @​dependabot in #​308

Release

• Fix changelog-preview permissions by @​BYK in #​302
• Bump Craft version to fix issues by @​BYK in #​299
• Switch from action-prepare-release to Craft by @​BYK in #​298

Other

• Bump to Node 24 LTS and setup-node v6 by @​andreiborza in #​313
• Pin GitHub Actions to full-length commit SHAs by @​joshuarli in #​310
• Set docker tag for master [skip ci] by @​getsantry[bot] in f988b254
• Use pull_request_target for changelog preview by @​BYK in #​301
• Add unlabeled trigger to changelog-preview by @​BYK in #​300
• Set docker tag for master [skip ci] by @​getsantry[bot] in 8873fc25
• Set docker tag for master [skip ci] by @​getsantry[bot] in c7b892f7

v3.5.0: 3.5.0

Compare Source

New Features ✨

Deps

• Bump js-yaml to ^4.1.1 by @​andreiborza in #​297
• Bump @​actions/core to ^2.0.1 by @​andreiborza in #​296

Build / dependencies / internal 🔧

• (cli) Upgrade Sentry CLI by @​szokeasaurusrex in #​293

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 8d62544e-b52b-4c81-a324-55cee0ab77b9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 13.01%. Comparing base (f565219) to head (2caa620).

Additional details and impacted files

@@           Coverage Diff            @@
##           staging    #1054   +/-   ##
========================================
  Coverage    13.01%   13.01%           
========================================
  Files          450      450           
  Lines         3127     3127           
========================================
  Hits           407      407           
  Misses        2720     2720           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.