Update GitHub Actions (main)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
golangci/golangci-lint	uses-with	minor	v2.13.2 → v2.14.0
nginx/compliance-rules	workflow	patch	v0.3.5 → v0.3.6
nginx/compliance-rules	action	patch	v0.3.5 → v0.3.6
release-drafter/release-drafter	action	minor	v7.7.0 → v7.9.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

golangci/golangci-lint (golangci/golangci-lint)

v2.14.0

Compare Source

Released on 2026-09-24

1. Bug fixes
   • fix: cache of facts reloading
2. Linters new features or changes
   • bodyclose: from 73d1f95 to 857993a (new directive handled)
   • exhaustive: from 0.12.0 to 0.13.0
   • exhaustruct_v5: from 5.0.3 to 5.2.0 (new option: allow-empty-blank-assignments)
   • go-check-sumtype: from 0.3.1 to ae6904d
   • gocritic: from 0.14.4 to 0.15.0
   • gofumpt: from 0.11.0 to 0.12.0
   • gomoddirectives: from 0.9.0 to 0.10.0
   • gosec: from 2.28.0 to 2.29.0 (re-enable G407)
   • govet-modernize: from 0.49.0 to 0.50.0
   • loggercheck: from 0.11.0 to 0.12.0
   • revive: from 1.15.0 to 1.17.0 (new rules: marshal-receiver, multiline-if-init, use-slices-concat)
   • tagliatelle: from 0.7.2 to 0.8.0
3. Linters bug fixes
   • fatcontext: from 0.10.0 to 0.10.1
   • flock: from 0.13.0 to 0.13.1
   • godoclint: from 0.11.2 to 0.11.4
   • protogetter: from 0.3.21 to 1.0.1
   • recvcheck: from 0.3.0 to 0.3.1
   • tagalign: from 1.4.3 to 1.4.4

nginx/compliance-rules (nginx/compliance-rules)

v0.3.6

Compare Source

release-drafter/release-drafter (release-drafter/release-drafter)

v7.9.0

Compare Source

What's Changed

New

• feat(autolabeler): sync configured pull request labels (#​1787) @​jetersen
• feat(autolabeler): support multiple labels, stop rules and fallback (#​1785) @​jetersen
• feat: expose PR labels in Drafter and Check PR outputs (#​1782) @​jetersen
• feat: add resolved tag template variable (#​1784) @​jetersen

Dependency Updates

• ci(deps): update reviewdog/action-actionlint action to v1.77.0 (#​1781) @​renovate[bot]

Bug Fixes

• fix(config): provide standard loading for the programmatic API (#​1783) @​jetersen
• fix: skip the missing-baseline warning when from is set (#​1789) @​jmeridth

Maintenance

• chore: release v7.9.0 (#​1790) @​release-drafter-releaser[bot]
• ci: dogfood Release Drafter and stage npm publishing (#​1778) @​jetersen
• ci: lint GitHub Actions workflows with actionlint (#​1780) @​jetersen

New Contributors

• No new contributors

Full Changelog: release-drafter/release-drafter@v7.8.0...v7.9.0

v7.8.0

Compare Source

What's Changed

New

• feat: merge repeated changes with group-changes (#​1725) @​slawekjaranowski, @​claude
• feat(facade): wire multiforge adapters (#​1709) @​jetersen
• feat(adapters): add GitLab REST adapter (#​1708) @​jetersen
• feat(adapters): add Gitea and Forgejo REST adapters (#​1707) @​jetersen
• feat: add config-driven check-pr validation (#​1706) @​jetersen
• feat: move GitHub Actions into workspace (#​1705) @​jetersen
• feat: add release-drafter CLI (#​1704) @​jetersen
• feat: expose programmatic API (#​1702) @​jetersen
• feat: add GitHub adapter (#​1701) @​jetersen
• feat: extract forge-neutral core contract (#​1699) @​jetersen

Dependency Updates

36 changes

• chore(deps): lock file maintenance (#​1770) @​renovate[bot]
• chore(deps): update dependency vite to 8.3.1 (#​1774) @​renovate[bot]
• chore(deps): update dependency @​graphql-codegen/cli to 7.4.3 (#​1776) @​renovate[bot]
• ci(deps): automerge tested maintenance and security updates (#​1775) @​jetersen
• ci(deps): allow daily updates and fix hosted dependency checks (#​1773) @​jetersen
• ci(deps): rebuild artifacts and prioritize confident updates (#​1772) @​jetersen
• chore(deps): align Undici with the Actions toolkit (#​1771) @​jetersen
• ci(deps): maintain lockfiles monthly and label security updates (#​1769) @​jetersen
• fix(deps): update dependency undici to 8.11.2 (#​1764) @​renovate[bot], @​jetersen
• fix(deps): update octokit monorepo (major) (#​1759) @​renovate[bot], @​jetersen
• chore(deps): update npm tool constraint to 12.1.0 (#​1763) @​renovate[bot]
• chore(deps): update vitest to 5.0.1 (#​1755) @​renovate[bot], @​cchanche
• ci(deps): update actions/stale action to v11.0.0 (#​1757) @​renovate[bot]
• fix(deps): update dependency conventional-commits-parser to 7.1.2 (#​1758) @​renovate[bot], @​github-actions[bot]
• fix(deps): update dependency zod to 4.6.5 (#​1754) @​renovate[bot], @​github-actions[bot]
• chore(deps): switch to OpenAPI webhook types (#​1761) @​jetersen
• fix(deps): update dependency verkit to 0.5.0 (#​1753) @​renovate[bot], @​github-actions[bot]
• chore(deps): update dependency dependency-cruiser to 18.4.0 (#​1746) @​renovate[bot], @​cchanche
• fix(deps): update octokit monorepo (#​1744) @​renovate[bot], @​cchanche
• chore(deps): update dependency @​biomejs/biome to 2.5.14 (#​1737) @​renovate[bot], @​cchanche
• ci(deps): update actions/checkout digest to 3d3c42e (#​1736) @​renovate[bot], @​cchanche
• chore(deps): update dependency undici to 7.29.1 [security] (#​1735) @​renovate[bot], @​github-actions[bot]
• ci(deps): update actions/github-script action to v9.0.0 (#​1756) @​renovate[bot]
• chore(deps): update node.js to v24.21.0 (#​1751) @​renovate[bot]
• chore(deps): update graphql-codegen (#​1750) @​renovate[bot]
• chore(deps): update dependency vite to 8.3.0 (#​1749) @​renovate[bot], @​github-actions[bot]
• chore(deps): update dependency knip to 6.38.0 (#​1747) @​renovate[bot]
• chore(deps): update dependency testcontainers to 12.1.0 (#​1748) @​renovate[bot], @​cchanche
• chore(deps): update dependency @​swc/core to 1.16.2 (#​1745) @​renovate[bot], @​cchanche
• fix(deps): update dependency yaml to 2.9.1 (#​1743) @​renovate[bot], @​cchanche, @​github-actions[bot]
• chore(deps): update dependency rolldown-plugin-dts to 0.28.6 (#​1742) @​renovate[bot]
• chore(deps): update dependency prettier to 3.9.9 (#​1741) @​renovate[bot]
• chore(deps): update dependency nock to 14.0.17 (#​1740) @​renovate[bot], @​cchanche
• chore(deps): update vitest to 4.1.11 (#​1739) @​renovate[bot]
• chore(deps): update dependency @​types/node to 24.13.6 (#​1738) @​renovate[bot], @​cchanche
• chore(deps): update dependency vitest to 4.1.11 [security] (#​1734) @​renovate[bot]

Bug Fixes

• fix(build): escape hidden Unicode in action bundles (#​1777) @​jetersen

Maintenance

• ci: fix sticky comment action dependency lookup (#​1768) @​jetersen
• ci: credit GraphQL codegen commits to GitHub Actions bot (#​1766) @​jetersen
• ci: wait 90 days for npm tool constraint updates (#​1765) @​jetersen
• ci: scope forge conformance to relevant dependencies (#​1762) @​jetersen
• chore: update generated GraphQL types (#​1690) @​github-actions[bot], @​cchanche, @​jetersen
• ci: add npm publishing workflow (#​1733) @​cchanche
• test: add npm publication readiness (#​1711) @​jetersen
• test: add real-forge conformance matrix (#​1710) @​jetersen
• chore: remove migration leftovers (#​1720) @​jetersen
• refactor: replace ignore with minimatch (#​1719) @​jetersen
• refactor: remove regex-parser dependency (#​1718) @​jetersen
• refactor: replace node-semver with verkit (#​1703) @​jetersen
• build: establish Node 24 workspace and CI tooling (#​1698) @​jetersen
• style: adapt prettier markdown formatting (#​1689) @​jetersen
• chore: format markdown with prettier (#​1688) @​jetersen

Documentation

• docs: add AI usage policy to the code of conduct (#​1730) @​cchanche
• docs: add ADOPTERS.md (#​1724) @​ChrisJr404, @​cchanche
• docs: complete monorepo documentation pass (#​1722) @​jetersen

New Contributors

• @​ChrisJr404 made their first contribution in #​1724

Full Changelog: release-drafter/release-drafter@v7.7.0...v7.8.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.94%. Comparing base (f0a4509) to head (832088c).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1946   +/-   ##
=======================================
  Coverage   88.93%   88.94%           
=======================================
  Files         111      111           
  Lines       12426    12426           
=======================================
+ Hits        11051    11052    +1     
+ Misses       1373     1372    -1     
  Partials        2        2           

see 1 file with indirect coverage changes

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update f0a4509...832088c. Read the comment docs.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.