chore(deps): update github actions

[oep-renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v6.0.0 -> v6.0.1
actions/create-github-app-token	action	patch	v2.2.0 -> v2.2.1
astral-sh/setup-uv	action	patch	v7.1.4 -> v7.1.5
github/codeql-action	action	patch	v4.31.5 -> v4.31.7
open-edge-platform/geti-ci	action	digest	829f714 -> 6665242
renovatebot/github-action	action	patch	v44.0.4 -> v44.0.5

---

Release Notes

actions/checkout (actions/checkout)

v6.0.1

Compare Source

What's Changed

• Update all references from v5 and v4 to v6 by @​ericsciple in #​2314
• Add worktree support for persist-credentials includeIf by @​ericsciple in #​2327
• Clarify v6 README by @​ericsciple in #​2328

Full Changelog: actions/checkout@v6...v6.0.1

actions/create-github-app-token (actions/create-github-app-token)

v2.2.1

Compare Source

Bug Fixes

• deps: bump the production-dependencies group with 2 updates (#​311) (b212e6a)

astral-sh/setup-uv (astral-sh/setup-uv)

v7.1.5: 🌈 allow setting cache-local-path without enable-cache: true

Compare Source

Changes

#​612 fixed a faulty behavior where this action set UV_CACHE_DIR even though enable-cache was false. It also fixed the cases were the cache dir is already configured in a settings file like pyproject.toml or UV_CACHE_DIR was already set. Here the action shouldn't overwrite or set UV_CACHE_DIR.

These fixes introduced an unwanted behavior: You can still set cache-local-path but this action didn't do anything. This release fixes that.

You can now use cache-local-path to automatically set UV_CACHE_DIR even when enable-cache is false (or gets set to false by default e.g. on self-hosted runners)

- name: This is now possible
  uses: astral-sh/setup-uv@v7
  with:
    enable-cache: false
    cache-local-path: "/path/to/cache"

🐛 Bug fixes

• allow cache-local-path w/o enable-cache @​eifinger (#​707)

🧰 Maintenance

• set biome files.maxSize to 2MiB @​eifinger (#​708)
• chore: update known checksums for 0.9.16 @​github-actions[bot] (#​706)
• chore: update known checksums for 0.9.15 @​github-actions[bot] (#​704)
• chore: use npm ci --ignore-scripts everywhere @​woodruffw (#​699)
• chore: update known checksums for 0.9.14 @​github-actions[bot] (#​700)
• chore: update known checksums for 0.9.13 @​github-actions[bot] (#​694)
• chore: update known checksums for 0.9.12 @​github-actions[bot] (#​693)
• chore: update known checksums for 0.9.11 @​github-actions[bot] (#​688)

⬆️ Dependency updates

• Bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 @​dependabot[bot] (#​695)
• bump dependencies @​eifinger (#​709)
• Bump github/codeql-action from 4.30.9 to 4.31.6 @​dependabot[bot] (#​698)
• Bump zizmorcore/zizmor-action from 0.2.0 to 0.3.0 @​dependabot[bot] (#​696)
• Bump eifinger/actionlint-action from 1.9.2 to 1.9.3 @​dependabot[bot] (#​690)

github/codeql-action (github/codeql-action)

v4.31.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025

• Update default CodeQL bundle version to 2.23.7. #​3343

See the full CHANGELOG.md for more information.

v4.31.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.6 - 01 Dec 2025

No user facing changes.

See the full CHANGELOG.md for more information.

renovatebot/github-action (renovatebot/github-action)

v44.0.5

Compare Source

Documentation

• update references to ghcr.io/renovatebot/renovate to v42.27.1 (1a6e892)
• update references to renovatebot/github-action to v44.0.4 (7dbfb72)

Miscellaneous Chores

• deps: update dependency @​tsconfig/node20 to v20.1.8 (089784b)
• deps: update dependency lint-staged to v16.2.7 (47fa0c7)
• deps: update dependency rimraf to v6.1.2 (6e7dbb8)
• deps: update dependency typescript-eslint to v8.47.0 (62c21fd)
• deps: update node.js to v20.19.6 (ebd33e2)
• deps: update pnpm to v10.23.0 (f662a18)
• set minimumReleaseAge to null (#​972) (df0277d)

Build System

• deps: lock file maintenance (2195956)

Continuous Integration

• deps: update renovate docker tag to v42.19.5 (e08a619)
• deps: update renovate docker tag to v42.19.6 (90f3ba2)
• deps: update renovate docker tag to v42.19.7 (c9783cc)
• deps: update renovate docker tag to v42.19.8 (cd5302b)
• deps: update renovate docker tag to v42.20.0 (9ef994d)
• deps: update renovate docker tag to v42.20.1 (72b1786)
• deps: update renovate docker tag to v42.21.0 (17199a9)
• deps: update renovate docker tag to v42.21.1 (ebc94ab)
• deps: update renovate docker tag to v42.21.3 (ba515da)
• deps: update renovate docker tag to v42.22.0 (79ec017)
• deps: update renovate docker tag to v42.22.1 (b933b81)
• deps: update renovate docker tag to v42.23.0 (dd2ea91)
• deps: update renovate docker tag to v42.24.0 (f7665b0)
• deps: update renovate docker tag to v42.24.1 (6a6d906)
• deps: update renovate docker tag to v42.25.2 (fbc76b1)
• deps: update renovate docker tag to v42.25.3 (f318c66)
• deps: update renovate docker tag to v42.26.0 (501b8b8)
• deps: update renovate docker tag to v42.26.10 (9b051ee)
• deps: update renovate docker tag to v42.26.11 (6b7c735)
• deps: update renovate docker tag to v42.26.2 (660d970)
• deps: update renovate docker tag to v42.26.3 (ff51f3b)
• deps: update renovate docker tag to v42.26.5 (a161523)
• deps: update renovate docker tag to v42.26.8 (6654dca)
• deps: update renovate docker tag to v42.26.9 (a417a00)
• deps: update renovate docker tag to v42.27.0 (78247c4)
• deps: update renovate docker tag to v42.27.1 (931e429)

---

Configuration

📅 Schedule: Branch creation - On day 1 of the month ( * * 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.