chore(deps): update github actions

[ferrlabs-renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
FerrLabs/.github (changelog)	action	digest	2294da4 → 5d33e5b
FerrLabs/FerrFlow (changelog)	action	digest	755d44b → 0003478
FerrLabs/Fixtures	action	minor	v1.1.1 → v1.2.1
actions/checkout (changelog)	action	digest	9c091bb → 3d3c42e
github/codeql-action (changelog)	action	digest	7188fc3 → e4fba86
ossf/scorecard-action	action	patch	v2.4.3 → v2.4.4
taiki-e/install-action	action	minor	v2.83.3 → v2.85.0	v2.85.2 (+1)

---

Release Notes

FerrLabs/Fixtures (FerrLabs/Fixtures)

v1.2.1

Compare Source

[1.2.1] - 2026-07-23

Bug Fixes

• fix(ci): repair renovate-rebase.yml truncated by the pin sweep (#​151)

v1.2.0

Compare Source

[1.2.0] - 2026-07-17

Features

• feat(generator): repack and write the commit-graph after generation (#​144)
• feat(ci): dispatch Renovate when the rebase box is ticked (#​142)

ossf/scorecard-action (ossf/scorecard-action)

v2.4.4

Compare Source

What's Changed

This update bumps the Scorecard version to the v5.5.0 release. For a complete list of changes, please refer to the Scorecard v5.4.0 release notes and the Scorecard v5.5.0 release notes.

• log POST failures instead of failing entire action by @​spencerschrock in #​1625

Full Changelog: ossf/scorecard-action@v2.4.3...v2.4.4

taiki-e/install-action (taiki-e/install-action)

v2.85.0: 2.85.0

Compare Source

• Support wild (alias: wild-linker). (#​1949)

• Support bpf-linker. (#​1950)

• Support rafn. (#​1935, thanks @​DarkWanderer)

• Update cargo-neat@latest to 0.5.1.

• Update zizmor@latest to 1.28.0.

• Update wasmtime@latest to 47.0.2.

• Update uv@latest to 0.11.31.

• Update syft@latest to 1.49.0.

v2.84.1: 2.84.1

Compare Source

• Update wasmtime@latest to 47.0.1.

• Update wasm-tools@latest to 1.254.0.

• Update uv@latest to 0.11.30.

• Update mise@latest to 2026.7.11.

• Update cargo-neat@latest to 0.5.0.

• Update cargo-crap@latest to 0.3.1.

• Update biome@latest to 2.5.5.

v2.84.0: 2.84.0

Compare Source

• Support d2. (#​1944)

• Support protoc-gen-connect-openapi. (#​1922, thanks @​JasterV)

• Update convco@latest to 0.7.0. (#​1941, thanks @​graelo)

• Update just@latest to 1.57.0.

• Update cargo-semver-checks@latest to 0.49.0.

• Update tombi@latest to 1.2.4.

• Update cosign@latest to 3.1.2.

v2.83.4: 2.83.4

Compare Source

• Update vacuum@latest to 0.29.10.

• Update uv@latest to 0.11.29.

• Update syft@latest to 1.48.0.

• Update prek@latest to 0.4.10.

• Update mise@latest to 2026.7.7.

• Update cargo-shear@latest to 1.13.2.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.