chore(deps-dev): update zgosalvez/github-actions-ensure-sha-pinned-actions action to v5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
zgosalvez/github-actions-ensure-sha-pinned-actions	action	major	v3.0.25 → v5.0.5

---

Release Notes

zgosalvez/github-actions-ensure-sha-pinned-actions (zgosalvez/github-actions-ensure-sha-pinned-actions)

v5.0.5

Compare Source

What's Changed

• Bump undici from 6.24.1 to 6.27.0 by @​dependabot[bot] in #​317
• Bump actions/checkout from 6.0.2 to 6.0.3 by @​dependabot[bot] in #​316
• Bump jest from 30.3.0 to 30.4.2 by @​dependabot[bot] in #​315
• Bump eslint from 10.1.0 to 10.3.0 by @​dependabot[bot] in #​314
• Bump yaml from 2.8.3 to 2.8.4 by @​dependabot[bot] in #​313
• Bump actions/setup-node from 6.2.0 to 6.4.0 by @​dependabot[bot] in #​312
• Bump actions/cache from 5.0.3 to 5.0.5 by @​dependabot[bot] in #​311
• Bump @​actions/core from 3.0.0 to 3.0.1 by @​dependabot[bot] in #​310
• Bump @​actions/glob from 0.6.1 to 0.7.0 by @​dependabot[bot] in #​309
• Bump zgosalvez/github-actions-get-action-runs-using-version from 2.0.25 to 3.0.1 by @​dependabot[bot] in #​305
• Fix dependabot security alert 59 by @​zgosalvez in #​318
• Hotfix/security60 by @​zgosalvez in #​319
• Fix js-yaml dependency issue by @​zgosalvez in #​320

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.5

v5.0.4

Compare Source

What's Changed

• Bump picomatch from 2.3.1 to 2.3.2 by @​dependabot[bot] in #​302
• Bump eslint from 10.0.3 to 10.1.0 by @​dependabot[bot] in #​301
• Bump brace-expansion by @​dependabot[bot] in #​303
• Bump yaml from 2.8.2 to 2.8.3 by @​dependabot[bot] in #​300

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.4

v5.0.3

Compare Source

What's Changed

• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​299

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.3

v5.0.2

Compare Source

What's Changed

• Bump jest from 30.2.0 to 30.3.0 by @​dependabot[bot] in #​298
• Bump eslint from 10.0.1 to 10.0.3 by @​dependabot[bot] in #​295
• Bump actions/cache from 5.0.1 to 5.0.3 by @​dependabot[bot] in #​294
• Bump undici from 6.23.0 to 6.24.1 by @​dependabot[bot] in #​297
• Bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​293
• Bump actions/setup-node from 6.1.0 to 6.2.0 by @​dependabot[bot] in #​292

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.2

v5.0.1

Compare Source

What's Changed

• Bump eslint from 10.0.0 to 10.0.1 by @​dependabot[bot] in #​287
• Bump minimatch by @​dependabot[bot] in #​289
• Bump minimatch by @​dependabot[bot] in #​290

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.1

v5.0.0

Compare Source

What's Changed

• Bump actions/cache from 4.3.0 to 5.0.1 by @​dependabot[bot] in #​277
• Bump eslint from 9.39.1 to 10.0.0 by @​dependabot[bot] in #​281
• Bump @​actions/glob from 0.5.0 to 0.6.1 by @​dependabot[bot] in #​280
• Bump @​actions/core from 1.11.1 to 3.0.0 by @​dependabot[bot] in #​282
• Potential fix for code scanning alert no. 11: Workflow does not contain permissions by @​zgosalvez in #​283
• Potential fix for code scanning alert no. 10: Workflow does not contain permissions by @​zgosalvez in #​284
• Potential fix for code scanning alert no. 12: Shell command built from environment values by @​zgosalvez in #​285
• Potential fix for code scanning alert no. 12: Shell command built from environment values by @​zgosalvez in #​286

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v4...v5.0.0

v5

Compare Source

v4.0.2

Compare Source

What's Changed

• Bump zgosalvez/github-actions-get-action-runs-using-version from 2.0.24 to 2.0.25 by @​dependabot[bot] in #​275
• Bump stefanzweifel/git-auto-commit-action from 7.0.0 to 7.1.0 by @​dependabot[bot] in #​274
• Bump actions/setup-node from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​276
• Bump actions/checkout from 6.0.0 to 6.0.1 by @​dependabot[bot] in #​278

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v4...v4.0.2

v4.0.1

Compare Source

What's Changed

• Bump actions/checkout from 5.0.0 to 6.0.0 by @​dependabot[bot] in #​270
• Bump glob from 10.4.5 to 10.5.0 by @​dependabot[bot] in #​269
• Bump js-yaml from 3.14.1 to 3.14.2 by @​dependabot[bot] in #​268
• Bump eslint from 9.36.0 to 9.39.1 by @​dependabot[bot] in #​267
• Bump actions/setup-node from 4.4.0 to 6.0.0 by @​dependabot[bot] in #​266
• Bump stefanzweifel/git-auto-commit-action from 6.0.1 to 7.0.0 by @​dependabot[bot] in #​265
• Bump jest from 30.1.3 to 30.2.0 by @​dependabot[bot] in #​260
• Bump yaml from 2.8.1 to 2.8.2 by @​dependabot[bot] in #​271

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v4...v4.0.1

v4.0.0

Compare Source

What's Changed

• Bump @​vercel/ncc from 0.38.3 to 0.38.4 by @​dependabot[bot] in #​257
• Bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​253
• Bump eslint from 9.26.0 to 9.36.0 by @​dependabot[bot] in #​256
• Bump jest from 29.7.0 to 30.1.3 by @​dependabot[bot] in #​255
• Bump actions/cache from 4.2.3 to 4.2.4 by @​dependabot[bot] in #​252
• Bump zgosalvez/github-actions-get-action-runs-using-version from 2.0.22 to 2.0.24 by @​dependabot[bot] in #​234
• Bump stefanzweifel/git-auto-commit-action from 5.2.0 to 6.0.1 by @​dependabot[bot] in #​242
• Bump yaml from 2.7.1 to 2.8.1 by @​dependabot[bot] in #​248
• Bump brace-expansion from 1.1.11 to 1.1.12 by @​dependabot[bot] in #​258
• fix #​116: support composite actions by @​atchertchian in #​239

New Contributors

• @​atchertchian made their first contribution in #​239

Full Changelog: zgosalvez/github-actions-ensure-sha-pinned-actions@v3...v4.0.0

v4

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.