chore(deps): update github-actions

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-go	action	minor	v4.0.1 -> v4.1.0
github/codeql-action	action	minor	v2.20.4 -> v2.21.3
slsa-framework/slsa-github-generator	action	minor	v1.7.0 -> v1.8.0

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

actions/setup-go (actions/setup-go)

v4.1.0

Compare Source

What's Changed

In scope of this release, slow installation on Windows was fixed by @​dsame in https://github.com/actions/setup-go/pull/393 and OS version was added to primaryKey for Ubuntu runners to avoid conflicts (https://github.com/actions/setup-go/pull/383)

This release also includes the following changes:

• Remove implicit dependencies by @​nikolai-laevskii in https://github.com/actions/setup-go/pull/378
• Update action.yml by @​mkelly in https://github.com/actions/setup-go/pull/379
• Added a description that go-version should be specified as a string type by @​n3xem in https://github.com/actions/setup-go/pull/367
• Add note about YAML parsing versions by @​dmitry-shibanov in https://github.com/actions/setup-go/pull/382
• Automatic update of configuration files from 05/23/2023 by @​github-actions in https://github.com/actions/setup-go/pull/377
• Bump tough-cookie and @​azure/ms-rest-js by @​dependabot in https://github.com/actions/setup-go/pull/392
• Bump word-wrap from 1.2.3 to 1.2.4 by @​dependabot in https://github.com/actions/setup-go/pull/397
• Bump semver from 6.3.0 to 6.3.1 by @​dependabot in https://github.com/actions/setup-go/pull/396

New Contributors

• @​mkelly made their first contribution in https://github.com/actions/setup-go/pull/379
• @​n3xem made their first contribution in https://github.com/actions/setup-go/pull/367

Full Changelog: actions/setup-go@v4...v4.1.0

github/codeql-action (github/codeql-action)

v2.21.3

Compare Source

v2.21.2

Compare Source

v2.21.1

Compare Source

v2.21.0

Compare Source

slsa-framework/slsa-github-generator (slsa-framework/slsa-github-generator)

v1.8.0

Compare Source

Release [v1.8.0] includes bug fixes and new features.

See the full change list.

v1.8.0: Generic Generator

• Added: A new
  base64-subjects-as-file
  was added to allow for specifying a large subject list.

v1.8.0: Node.js Builder (beta)

• Fixed: Publishing for non-scoped packages was fixed (See
  #​2359)
• Fixed: Documentation was updated to clarify that the GitHub Actions
  deployment event is not supported.
• Changed: The file extension for the generated provenance file was changed
  from .sigstore to .build.slsa in order to make it easier to identify
  provenance files regardless of file format.
• Fixed: The publish action was fixed to address an issue with the package
  name when using Node 16.

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.