ci(deps): carry licence rows forward for bumped action pins

[github-actions]

Opened by sbom-actions-currency.

sbom-check refuses an action pin with no row in mise-tasks/sbom-actions.tsv, and Renovate cannot write that table — so every action bump opens red and holds the prConcurrentLimit: 1 slot (CLOUD-1213).

Each row here is the same repository's existing row with only the sha changed. It was carried forward only after every candidate licence file was confirmed byte-identical between the mapped commit and the new one, so the judgement already recorded still describes those exact bytes. Nothing was re-derived.

A pin whose licence files differ, or whose repository has no row at all, is not here — it is reported as a warning in the run log for a person to read.

Refs: CLOUD-1213

DO-NOT-CLOSE CLOUD-1213

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: e27cd440-d857-46e8-80d0-1504539d2bd0

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[wenzowski]

This head is red on: ci, final.

The lane has returned it to draft and added renovate-frozen, so
Renovate will stop rebasing it and this pull request stops spending
CI minutes it cannot convert into a landing. Nothing here retries on
its own: a dependency bump cannot fix a check that needs a change to
the repository.

To resume, land the fix on main and remove the label. The next
rebase mints a fresh head, the lane readies it once, and it lands if
it is green.