Update github actions (#833)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-go](https://redirect.github.com/actions/setup-go)
([changelog](https://redirect.github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c..924ae3a1cded613372ab5595356fb5720e22ba16))
| action | digest | `4a36011` → `924ae3a` |
|
[anthropics/claude-code-action](https://redirect.github.com/anthropics/claude-code-action)
([changelog](https://redirect.github.com/anthropics/claude-code-action/compare/2fee15510437d71399d9139ed60433470484a8fb..558b1d6cab4085c7753fe402c10bef0fbb92ac7a))
| action | digest | `2fee155` → `558b1d6` |
| [azure/setup-helm](https://redirect.github.com/azure/setup-helm)
([changelog](https://redirect.github.com/azure/setup-helm/compare/dda3372f752e03dde6b3237bc9431cdc2f7a02a2..9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310))
| action | digest | `dda3372` → `9bc31f4` |
| [azure/setup-helm](https://redirect.github.com/azure/setup-helm) |
action | patch | `v5.0.0` → `v5.0.1` |
| [docker/login-action](https://redirect.github.com/docker/login-action)
| action | minor | `v4.2.0` → `v4.4.0` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
([changelog](https://redirect.github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e..54f647b7e1bb85c95cddabcd46b0c578ec92bc1a))
| action | digest | `8aad20d` → `54f647b` |
|
[golangci/golangci-lint-action](https://redirect.github.com/golangci/golangci-lint-action)
| action | minor | `v9.2.1` → `v9.3.0` |
|
[goreleaser/goreleaser-action](https://redirect.github.com/goreleaser/goreleaser-action)
([changelog](https://redirect.github.com/goreleaser/goreleaser-action/compare/5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89..f06c13b6b1a9625abc9e6e439d9c05a8f2190e94))
| action | digest | `5daf1e9` → `f06c13b` |
| [ko-build/setup-ko](https://redirect.github.com/ko-build/setup-ko) |
action | minor | `v0.9` → `v0.10` |

---

### Release Notes

<details>
<summary>azure/setup-helm (azure/setup-helm)</summary>

###
[`v5.0.1`](https://redirect.github.com/azure/setup-helm/compare/v5.0.0...v5.0.1)

[Compare
Source](https://redirect.github.com/azure/setup-helm/compare/v5.0.0...v5.0.1)

</details>

<details>
<summary>docker/login-action (docker/login-action)</summary>

###
[`v4.4.0`](https://redirect.github.com/docker/login-action/compare/v4.3.0...v4.4.0)

[Compare
Source](https://redirect.github.com/docker/login-action/compare/v4.3.0...v4.4.0)

###
[`v4.3.0`](https://redirect.github.com/docker/login-action/releases/tag/v4.3.0)

[Compare
Source](https://redirect.github.com/docker/login-action/compare/v4.2.0...v4.3.0)

- Preserve names in esbuild bundle by
[@&#8203;crazy-max](https://redirect.github.com/crazy-max) in
[#&#8203;1022](https://redirect.github.com/docker/login-action/pull/1022)
- Bump
[@&#8203;aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr)
and
[@&#8203;aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public)
to 3.1076.0
[#&#8203;999](https://redirect.github.com/docker/login-action/pull/999)
[#&#8203;1030](https://redirect.github.com/docker/login-action/pull/1030)
- Bump
[@&#8203;docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit)
from 0.90.0 to 0.92.0 in
[#&#8203;1004](https://redirect.github.com/docker/login-action/pull/1004)
[#&#8203;1027](https://redirect.github.com/docker/login-action/pull/1027)
- Bump
[@&#8203;sigstore/core](https://redirect.github.com/sigstore/core) from
3.1.0 to 3.2.1 in
[#&#8203;1023](https://redirect.github.com/docker/login-action/pull/1023)
- Bump
[@&#8203;sigstore/verify](https://redirect.github.com/sigstore/verify)
from 3.1.0 to 3.1.1 in
[#&#8203;1029](https://redirect.github.com/docker/login-action/pull/1029)
- Bump http-proxy-agent and https-proxy-agent to 9.1.0 in
[#&#8203;1017](https://redirect.github.com/docker/login-action/pull/1017)
- Bump js-yaml from 4.1.1 to 5.2.0 in
[#&#8203;1028](https://redirect.github.com/docker/login-action/pull/1028)
- Bump sigstore from 4.1.0 to 4.1.1 in
[#&#8203;1031](https://redirect.github.com/docker/login-action/pull/1031)
- Bump tmp from 0.2.5 to 0.2.7 in
[#&#8203;1002](https://redirect.github.com/docker/login-action/pull/1002)
- Bump undici from 6.24.1 to 6.27.0 in
[#&#8203;1020](https://redirect.github.com/docker/login-action/pull/1020)
- Bump vite from 7.3.3 to 7.3.6 in
[#&#8203;1019](https://redirect.github.com/docker/login-action/pull/1019)

**Full Changelog**:
<docker/login-action@v4.2.0...v4.3.0>

</details>

<details>
<summary>golangci/golangci-lint-action
(golangci/golangci-lint-action)</summary>

###
[`v9.3.0`](https://redirect.github.com/golangci/golangci-lint-action/releases/tag/v9.3.0)

[Compare
Source](https://redirect.github.com/golangci/golangci-lint-action/compare/v9.2.1...v9.3.0)

<!-- Release notes generated using configuration in .github/release.yml
at v9.3.0 -->

#### What's Changed

##### Changes

- feat: add no-run-logs-group as experimental option by
[@&#8203;ldez](https://redirect.github.com/ldez) in
[#&#8203;1403](https://redirect.github.com/golangci/golangci-lint-action/pull/1403)

##### Dependencies

- build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 in the
github-actions group by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1395](https://redirect.github.com/golangci/golangci-lint-action/pull/1395)
- build(deps): bump tmp from 0.2.5 to 0.2.6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1397](https://redirect.github.com/golangci/golangci-lint-action/pull/1397)
- build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 in the
github-actions group by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1398](https://redirect.github.com/golangci/golangci-lint-action/pull/1398)
- build(deps): bump tmp from 0.2.6 to 0.2.7 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1399](https://redirect.github.com/golangci/golangci-lint-action/pull/1399)
- build(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1400](https://redirect.github.com/golangci/golangci-lint-action/pull/1400)

**Full Changelog**:
<golangci/golangci-lint-action@v9.2.1...v9.3.0>

</details>

<details>
<summary>ko-build/setup-ko (ko-build/setup-ko)</summary>

###
[`v0.10`](https://redirect.github.com/ko-build/setup-ko/releases/tag/v0.10)

[Compare
Source](https://redirect.github.com/ko-build/setup-ko/compare/v0.9...v0.10)

#### What's Changed

- Harden composite action against shell expression and env-file
injection by [@&#8203;imjasonh](https://redirect.github.com/imjasonh)
with [@&#8203;Copilot](https://redirect.github.com/Copilot) in
[#&#8203;66](https://redirect.github.com/ko-build/setup-ko/pull/66)

#### New Contributors

- [@&#8203;imjasonh](https://redirect.github.com/imjasonh) with
[@&#8203;Copilot](https://redirect.github.com/Copilot) made their first
contribution in
[#&#8203;66](https://redirect.github.com/ko-build/setup-ko/pull/66)

**Full Changelog**:
<ko-build/setup-ko@v0.9...v0.10>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Between 12:00 AM and 03:59 AM, only on Monday (`* 0-3 * * 1`)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/stacklok/toolhive-registry-server).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/claude.yml

@@ -44,6 +44,6 @@ jobs:
 
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@2fee15510437d71399d9139ed60433470484a8fb # v1
+        uses: anthropics/claude-code-action@558b1d6cab4085c7753fe402c10bef0fbb92ac7a # v1
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}

.github/workflows/create-release-pr.yml

@@ -40,7 +40,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
-      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
           go-version: 'stable'
 

.github/workflows/helm-charts-test.yml

@@ -17,16 +17,16 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
           go-version: 'stable'
           cache: true
 
       - name: Set up ko
-        uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
+        uses: ko-build/setup-ko@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445 # v0.10
 
       - name: Set up Helm
-        uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0
+        uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
           version: v4.2.2
 

.github/workflows/helm-publish.yml

@@ -30,7 +30,7 @@ jobs:
           echo "Extracted version: $VERSION from tag: $TAG"
 
       - name: Set up Helm
-        uses: azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5
+        uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5
         with:
           version: 'v4.2.2'
 

.github/workflows/image-build-and-publish.yml

@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
           go-version: 'stable'
 
@@ -42,14 +42,14 @@ jobs:
           fi
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup ko
-        uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
+        uses: ko-build/setup-ko@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445 # v0.10
 
       - name: Install Cosign
         uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2

.github/workflows/lint.yml

@@ -14,13 +14,13 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
           go-version: 'stable'
           cache: true
 
       - name: Run golangci-lint
-        uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1
+        uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0
         with:
           args: --timeout=5m
 

.github/workflows/releaser.yml

@@ -105,7 +105,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
           go-version: 'stable'
           cache: true
@@ -147,7 +147,7 @@ jobs:
 
       - name: Run GoReleaser
         id: run-goreleaser
-        uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7
+        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7
         with:
           distribution: goreleaser
           version: "~> v2"

.github/workflows/security-scan.yml

@@ -32,7 +32,7 @@ jobs:
           severity-cutoff: "high"
 
       - name: Upload Grype scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
+        uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4
         if: always()
         with:
           sarif_file: ${{ steps.grype-scan.outputs.sarif }}

.github/workflows/test.yml

@@ -34,7 +34,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
           go-version: 'stable'
           cache: true
@@ -79,7 +79,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
           go-version: 'stable'
           cache: true
@@ -126,7 +126,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
           go-version: 'stable'
           cache: true
@@ -161,7 +161,7 @@ jobs:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
 
       - name: Set up Go
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
           go-version: 'stable'
           cache: true

.github/workflows/verify-gen.yml

@@ -13,7 +13,7 @@ jobs:
 
     steps:
       - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
-      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
+      - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
           go-version: 'stable'
       - name: Install Task