chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	minor	v7.0.0 → v7.1.0
docker/build-push-action	action	minor	v7.3.0 → v7.4.0
docker/setup-buildx-action	action	minor	v4.3.0 → v4.4.1
getsentry/action-release	action	patch	v3.7.0 → v3.7.1
tailscale/github-action	action	minor	v4.1.3 → v4.2.0

---

Release Notes

actions/setup-node

v7.1.0

Compare Source

What's Changed

Enhancements:

• Add support for mise.toml file by @​gperdomor in #​1421
• Support absolute paths in node-version-file by @​v-mahabaleshwars in #​1633

Bug fixes:

• Add Node version validation and manifest fetch retry by @​v-jitenderpalsingh in #​1580

Documentation updates:

• README.md: bump actions/checkout to latest version 7 by @​deining in #​1578
• docs: add V7 ESM migration and NODE_AUTH_TOKEN behavior change by @​v-gowridurgad in #​1593
• Fixed cache recommendation syntax by @​SubJunk in #​1603

Dependency updates:

• Update workflow pins and migrate Node matrices to modern versions by @​v-HarithaVattikuti in #​1583
• Upgrade @​actions/cache to 6.2.0 by @​philip-gai in #​1584
• Pin @​types/node to v24 by @​v-priyagupta108 in #​1585
• Override brace-expansion to 5.0.8 by @​v-priyagupta108 with @​Copilot in #​1599
• Upgrade actions/checkout from 7.0.0 to 7.0.1 by @​dependabot in #​1598
• Upgrade prettier from 3.8.4 to 3.9.6 by @​dependabot in #​1590
• Upgrade @​vercel/ncc from 0.44.0 to 0.45.0 by @​dependabot in #​1610
• Upgrade pnpm/action-setup from 6.0.9 to 6.0.10 by @​dependabot in #​1602
• Upgrade baseline-browser-mapping from 2.10.38 to 2.11.22 by @​dependabot in #​1629
• Upgrade @​types/semver from 7.7.1 to 7.8.0 by @​dependabot in #​1616
• Upgrade @​typescript-eslint/parser from 8.62.0 to 8.70.0 by @​dependabot in #​1615
• Upgrade pnpm/action-setup from 6.0.10 to 6.1.0 by @​dependabot in #​1631
• Upgrade jest-each from 30.4.1 to 30.5.2 by @​dependabot in #​1636
• Upgrade eslint-plugin-n from 18.1.0 to 18.3.0 by @​dependabot in #​1638
• Update dependencies and add license files by @​v-HarithaVattikuti in #​1642
• Upgrade eslint from 10.5.0 to 10.11.0 and package.json from 7.0.0 to 7.1.0 by @​dependabot in #​1635

New Contributors

• @​v-jitenderpalsingh made their first contribution in #​1580
• @​philip-gai made their first contribution in #​1584
• @​gperdomor made their first contribution in #​1421
• @​SubJunk made their first contribution in #​1603

Full Changelog: actions/setup-node@v7.0.0...v7.1.0

docker/build-push-action

v7.4.0

Compare Source

• Use the shared error helper for Buildx commands by @​crazy-max in #​1620
• Prevent workflow command injection in metadata logs by @​crazy-max in #​1617
• Bump @​docker/actions-toolkit from 0.92.0 to 0.100.0 in #​1614 #​1618 #​1621
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​1609
• Bump brace-expansion from 1.1.13 to 1.1.18 in #​1592
• Bump csv-parse from 7.0.0 to 7.0.2 in #​1613
• Bump js-yaml from 4.3.0 to 4.3.2 in #​1605 #​1615
• Bump nanoid from 3.3.16 to 3.3.18 in #​1611
• Bump postcss from 8.5.10 to 8.5.25 in #​1590
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #​1606
• Bump sigstore from 4.1.0 to 4.1.1 in #​1577
• Bump undici from 6.27.0 to 6.28.0 in #​1594

Full Changelog: docker/build-push-action@v7.3.0...v7.4.0

docker/setup-buildx-action

v4.4.1

Compare Source

• Skip BuildKit image pre-pulls for explicit endpoints by @​crazy-max in #​624

Full Changelog: docker/setup-buildx-action@v4.4.0...v4.4.1

v4.4.0

Compare Source

• Use official Buildx releases for cloud driver by @​crazy-max in #​606
• Pull BuildKit image before builder creation by @​crazy-max in #​609
• Use shared error helpers for Buildx and Docker commands by @​crazy-max in #​620
• Bump @​docker/actions-toolkit from 0.95.0 to 0.100.0 in #​610 #​618 #​619
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​614
• Bump js-yaml from 5.3.0 to 5.4.2 in #​608 #​617
• Bump postcss-selector-parser from 7.1.1 to 7.1.5 in #​611

Full Changelog: docker/setup-buildx-action@v4.3.0...v4.4.0

getsentry/action-release

v3.7.1: 3.7.1

Compare Source

New Features ✨

• (deps) Bump @​sentry/node to 10.71.0 by @​andreiborza in #​331

Bug Fixes 🐛

Deps

• Pin transitive js-yaml 3.x to 3.15.2 by @​andreiborza in #​329
• Bump @​actions/core to 2.0.3 to get undici 6.28.0 by @​andreiborza in #​330

Internal Changes 🔧

Deps

• Bump brace-expansion from 1.1.16 to 1.1.21 by @​dependabot in #​338
• Bump undici from 6.28.0 to 6.29.0 by @​andreiborza in #​339
• Bump browserslist from 4.22.1 to 4.28.8 by @​dependabot in #​333
• Bump brace-expansion from 1.1.11 to 1.1.16 by @​dependabot in #​327
• Bump @​babel/core from 7.23.2 to 7.29.7 by @​dependabot in #​325

Deps Dev

• Bump js-yaml from 4.3.1 to 4.3.2 by @​dependabot in #​334
• Bump js-yaml from 4.3.0 to 4.3.1 by @​dependabot in #​328
• Bump js-yaml from 4.2.0 to 4.3.0 by @​dependabot in #​326
• Bump js-yaml from 4.1.1 to 4.2.0 by @​dependabot in #​324

Other

• Build arm64 Docker images on native runners by @​andreiborza in #​337
• Limit GITHUB_TOKEN permissions for lint and check-dist by @​andreiborza in #​332

Other

• Fix handling of INPUT_URL_PREFIX in test by @​jramos in #​203

tailscale/github-action

v4.2.0

Compare Source

What's Changed

• feat: implement log grouping for better output by @​jaxxstorm in #​304
• fix: reuse stale tailscale.tgz on self-hosted runners by @​TowyTowy in #​305
• Bump typescript from 5.9.3 to 6.0.3 by @​dependabot[bot] in #​298
• Bump actions/setup-node from 6.4.0 to 7.0.0 by @​dependabot[bot] in #​312
• Bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot[bot] in #​314

New Contributors

• @​TowyTowy made their first contribution in #​305

Full Changelog: tailscale/github-action@v4.1.3...v4.2.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Only on Monday (* * * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.