chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
EmbarkStudios/cargo-deny-action	action	patch	v2.0.17 → v2.0.18
crate-ci/typos	action	patch	v1.46.0 → v1.46.1
golangci/golangci-lint	uses-with	patch	v2.12.1 → v2.12.2
release-drafter/release-drafter	action	minor	v7.2.1 → v7.3.0
sigstore/cosign-installer	action	patch	v4.1.1 → v4.1.2
taiki-e/install-action	action	patch	v2.77.1 → v2.77.5

---

Release Notes

EmbarkStudios/cargo-deny-action (EmbarkStudios/cargo-deny-action)

v2.0.18: Release 2.0.18 - cargo-deny 0.19.5

Compare Source

Fixed

• PR#857 fixed a segfault reported in #​855.

crate-ci/typos (crate-ci/typos)

v1.46.1

Compare Source

[1.46.1] - 2026-05-08

Fixes

• Don't correct to confidentials

golangci/golangci-lint (golangci/golangci-lint)

v2.12.2

Compare Source

Released on 2026-05-06

1. Linters bug fixes
   • gomodguard_v2: fix blocked configuration
   • gomodguard_v2: from 2.1.0 to 2.1.3
   • iface: from 1.4.1 to 1.4.2

release-drafter/release-drafter (release-drafter/release-drafter)

v7.3.0

Compare Source

What's Changed

New

• feat: recover recently merged PRs missed by associated PRs lag (#​1604) @​jetersen
• feat: switch release discovery to ref comparison and explicit missing-baseline warnings (#​1570) @​jetersen

Bug Fixes

• fix: restore prerelease-identifier on first run when no prior releases exist (#​1602) @​jrbeilke
• fix: prevent using commitish like refs/pull (#​1598) @​cchanche

Maintenance

• ci: rebuild dist after codegen so generated PRs include bundle updates (#​1605) @​jetersen
• chore: update generated GraphQL types (#​1600) @​github-actions[bot]
• chore: clarify base repository pr filtering (#​1599) @​cchanche

Dependency Updates

• build(deps-dev): bump postcss from 8.5.8 to 8.5.12 (#​1597) @​dependabot[bot]

Full Changelog: release-drafter/release-drafter@v7.2.1...v7.3.0

sigstore/cosign-installer (sigstore/cosign-installer)

v4.1.2

Compare Source

What's Changed

• Bump cosign to 3.0.6 in #​232

taiki-e/install-action (taiki-e/install-action)

v2.77.5

Compare Source

v2.77.4: 2.77.4

Compare Source

• Update tombi@latest to 0.11.1.

• Update cargo-llvm-cov@latest to 0.8.6.

• Update uv@latest to 0.11.12.

v2.77.3: 2.77.3

Compare Source

• Update typos@latest to 1.46.1.

• Update rclone@latest to 1.74.1.

• Update tombi@latest to 0.11.0.

• Update osv-scanner@latest to 2.3.8.

• Update mise@latest to 2026.5.3.

v2.77.2: 2.77.2

Compare Source

• Update martin@latest to 1.9.0.

• Update wasm-bindgen@latest to 0.2.121.

• Update uv@latest to 0.11.11.

• Update mise@latest to 2026.5.1.

• Update prek@latest to 0.3.13.

• Update tombi@latest to 0.10.6.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.

[viccuad]

Approving, helm unittest failure is fixed by #1730