chore(deps): update all non-major dependencies in .github/workflows/test.yml

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
actions/checkout	action	patch	v4.2.0 -> v4.2.1
actions/upload-artifact	action	patch	v4.4.0 -> v4.4.1
docker/bake-action	action	minor	v5.8.0 -> v5.10.0
docker/setup-buildx-action	action	minor	v3.6.1 -> v3.7.1
github/codeql-action	action	patch	v3.26.9 -> v3.26.11
golangci/golangci-lint-action	action	digest	aaa42aa -> 971e284
sigstore/cosign-installer	action	minor	v3.6.0 -> v3.7.0

---

Release Notes

actions/checkout (actions/checkout)

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

actions/upload-artifact (actions/upload-artifact)

v4.4.1

Compare Source

What's Changed

• Add a section about hidden files by @​joshmgross in https://github.com/actions/upload-artifact/pull/607
• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/upload-artifact/pull/621
• Update @​actions/artifact to latest version, includes symlink and timeout fixes by @​robherley in https://github.com/actions/upload-artifact/pull/625

New Contributors

• @​Jcambass made their first contribution in https://github.com/actions/upload-artifact/pull/621

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

docker/bake-action (docker/bake-action)

v5.10.0

Compare Source

• Add allow input by @​crazy-max in https://github.com/docker/bake-action/pull/253

Full Changelog: docker/bake-action@v5.9.0...v5.10.0

v5.9.0

Compare Source

• Bump @​docker/actions-toolkit from 0.38.0 to 0.39.0 in https://github.com/docker/bake-action/pull/250

Full Changelog: docker/bake-action@v5.8.0...v5.9.0

docker/setup-buildx-action (docker/setup-buildx-action)

v3.7.1

Compare Source

• Switch back to uuid package by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/369

Full Changelog: docker/setup-buildx-action@v3.7.0...v3.7.1

v3.7.0

Compare Source

• Always set buildkitd-flags if opt-in by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/363
• Remove uuid package and switch to crypto by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/366
• Bump @​docker/actions-toolkit from 0.35.0 to 0.39.0 in https://github.com/docker/setup-buildx-action/pull/362
• Bump path-to-regexp from 6.2.2 to 6.3.0 in https://github.com/docker/setup-buildx-action/pull/354

Full Changelog: docker/setup-buildx-action@v3.6.1...v3.7.0

github/codeql-action (github/codeql-action)

v3.26.11

Compare Source

v3.26.10

Compare Source

sigstore/cosign-installer (sigstore/cosign-installer)

v3.7.0

Compare Source

What's Changed

• Bump actions/checkout from 4.1.7 to 4.2.0 by @​dependabot in https://github.com/sigstore/cosign-installer/pull/172
• bump for latest cosign v2.4.1 release by @​bobcallaway in https://github.com/sigstore/cosign-installer/pull/173

Full Changelog: sigstore/cosign-installer@v3.6.0...v3.7.0

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.