chore(deps): update weekly update

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/build-push-action	action	minor	v6.17.0 -> v6.18.0
github/codeql-action	action	patch	v3.28.17 -> v3.28.19
gradle/actions	action	minor	v4.3.1 -> v4.4.0
ossf/scorecard-action	action	patch	v2.4.1 -> v2.4.2
python	final	patch	3.13.3-slim -> 3.13.4-slim
python	stage	patch	3.13.3 -> 3.13.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

docker/build-push-action (docker/build-push-action)

v6.18.0

Compare Source

• Bump @​docker/actions-toolkit from 0.61.0 to 0.62.1 in https://github.com/docker/build-push-action/pull/1381

[!NOTE]
Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

github/codeql-action (github/codeql-action)

v3.28.19

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.19 - 03 Jun 2025

• The CodeQL Action no longer includes its own copy of the extractor for the actions language, which is currently in public preview.
  The actions extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled the actions language and you have pinned
  your tools: property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disable
  actions analysis.
• Update default CodeQL bundle version to 2.21.4. #​2910

See the full CHANGELOG.md for more information.

v3.28.18

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.18 - 16 May 2025

• Update default CodeQL bundle version to 2.21.3. #​2893
• Skip validating SARIF produced by CodeQL for improved performance. #​2894
• The number of threads and amount of RAM used by CodeQL can now be set via the CODEQL_THREADS and CODEQL_RAM runner environment variables. If set, these environment variables override the threads and ram inputs respectively. #​2891

See the full CHANGELOG.md for more information.

gradle/actions (gradle/actions)

v4.4.0

Compare Source

This release updates 2 downstream components:

• Develocity injection has been updated to v2.0
  • Some environment variables related to Develocity injection have been renamed. All vars now being with DEVELOCITY_INJECTION_. Check the docs for more details.
• Dependency-graph plugin has been updated to v1.4.0
  • The 'detector' values included in the generated graph can now be configured via environment variables.

What's Changed

• Update develocity-injection init script to v1.3 by @​bot-githubaction in https://github.com/gradle/actions/pull/592
• Update develocity-injection init script to v2.0 by @​bot-githubaction in https://github.com/gradle/actions/pull/593
• [StepSecurity] ci: Harden GitHub Actions by @​step-security-bot in https://github.com/gradle/actions/pull/597
• Use v1.4.0 of dependency graph plugin by @​bigdaz in https://github.com/gradle/actions/pull/638

New Contributors

• @​step-security-bot made their first contribution in https://github.com/gradle/actions/pull/597

Full Changelog: gradle/actions@v4.3.1...v4.4.0

ossf/scorecard-action (ossf/scorecard-action)

v2.4.2

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard v5.2.0 and v5.2.1 release notes.

Full Changelog: ossf/scorecard-action@v2.4.1...v2.4.2

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 89.79%. Comparing base (a756317) to head (b1320f1).
Report is 4 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #7352   +/-   ##
=========================================
  Coverage     89.79%   89.79%           
  Complexity     6969     6969           
=========================================
  Files           795      795           
  Lines         21122    21122           
  Branches       2056     2056           
=========================================
  Hits          18967    18967           
  Misses         1495     1495           
  Partials        660      660           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.