chore(deps): update github-actions deps

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	patch	v2.2.0 -> v2.2.1
actions/stale	action	patch	v10.1.0 -> v10.1.1
anchore/sbom-action	action	patch	v0.20.10 -> v0.20.11
codecov/codecov-action	action	patch	5.5.1 -> 5.5.2
github/codeql-action	action	patch	v4.31.6 -> v4.31.7
streetsidesoftware/cspell-action	action	minor	v8.0.0 -> v8.1.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

v2.2.1

Compare Source

Bug Fixes

• deps: bump the production-dependencies group with 2 updates (#​311) (b212e6a)

actions/stale (actions/stale)

v10.1.1

Compare Source

What's Changed

Bug Fix

• Add Missing Input Reading for only-issue-types by @​Bibo-Joshi in #​1298

Improvement

• Improves error handling when rate limiting is disabled on GHES. by @​chiranjib-swain in #​1300

Dependency Upgrades

• Upgrade eslint-config-prettier from 8.10.0 to 10.1.8 by @​dependabot in #​1276
• Upgrade @​types/node from 20.10.3 to 24.2.0 and document breaking changes in v10 by @​dependabot in #​1280
• Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @​dependabot in #​1291
• Upgrade actions/checkout from 4 to 6 by @​dependabot in #​1306

New Contributors

• @​chiranjib-swain made their first contribution in #​1300

Full Changelog: actions/stale@v10...v10.1.1

anchore/sbom-action (anchore/sbom-action)

v0.20.11

Compare Source

Changes in v0.20.11

• update Syft to v1.38.2 (#​557)
• bump @​octokit/plugin-paginate-rest, @​actions/artifact and @​actions/github (#​550) [[dependabot[bot]](https://github.com/dependabot[bot])]
• bump js-yaml (#​552) [[dependabot[bot]](https://github.com/dependabot[bot])]

codecov/codecov-action (codecov/codecov-action)

v5.5.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.1..v5.5.2

github/codeql-action (github/codeql-action)

v4.31.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.7 - 05 Dec 2025

• Update default CodeQL bundle version to 2.23.7. #​3343

See the full CHANGELOG.md for more information.

streetsidesoftware/cspell-action (streetsidesoftware/cspell-action)

v8.1.1

Compare Source

Updates and Bug Fixes

• Fix publishing step (18eb68e)

v8.1.0

Compare Source

Documentation

• Upgrade checkout and cspell-action versions (#​2501) (8d0a18b)

Features

• Add summary option (#​2549) (873ff5f)
• Update CSpell version (9.4.0) (#​2544) (2e8603d)

Updates and Bug Fixes

• Set esbuild target to node24 (#​2510) (14af53b)
• Update CSpell version (9.3.1) (#​2508) (a879e6e)
• Update CSpell version (9.3.2) (#​2516) (c176300)
• Update Dictionaries and Dependencies (#​2514) (ccd54f7)
• Update Dictionaries and Dependencies (#​2522) (d4e5a6d)
• Update Dictionaries and Dependencies (#​2527) (aadf274)
• Update Dictionaries and Dependencies (#​2535) (50b7781)
• Update Dictionaries and Dependencies (#​2537) (272b283)
• Workflow Bot -- Update ALL Dependencies (main) (#​2509) (0c3c972)
• Workflow Bot -- Update ALL Dependencies (main) (#​2511) (98131f7)
• Workflow Bot -- Update ALL Dependencies (main) (#​2534) (17d6e4f)
• Workflow Bot -- Update ALL Dependencies (main) (#​2539) (e00d8fa)

---

Configuration

📅 Schedule: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.14%. Comparing base (b58bbb7) to head (82c66dc).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #14265      +/-   ##
==========================================
- Coverage   92.16%   92.14%   -0.03%     
==========================================
  Files         668      668              
  Lines       41517    41517              
==========================================
- Hits        38264    38255       -9     
- Misses       2217     2223       +6     
- Partials     1036     1039       +3     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[codspeed-hq]

CodSpeed Performance Report

Merging #14265 will not alter performance

_{Comparing renovate/github-actions-deps (82c66dc) with main (b58bbb7)}

⚠️ Unknown Walltime execution environment detected

Using the Walltime instrument on standard Hosted Runners will lead to inconsistent data.

For the most accurate results, we recommend using CodSpeed Macro Runners: bare-metal machines fine-tuned for performance measurement consistency.

Summary

✅ 59 untouched
⏩ 20 skipped¹

Footnotes

1. 20 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩