fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/setup-go	action	minor	v5.4.0 -> v5.5.0
codecov/codecov-action	action	patch	v5.4.0 -> v5.4.2
github.com/urfave/cli/v3	require	patch	v3.3.2 -> v3.3.3
github/codeql-action	action	patch	v3.28.15 -> v3.28.17
golang.org/x/crypto	require	minor	v0.37.0 -> v0.38.0
gorm.io/gorm	require	patch	v1.26.0 -> v1.26.1

---

Release Notes

actions/setup-go (actions/setup-go)

v5.5.0

Compare Source

What's Changed

Bug fixes:

• Update self-hosted environment validation by @​priyagupta108 in https://github.com/actions/setup-go/pull/556
• Add manifest validation and improve error handling by @​priyagupta108 in https://github.com/actions/setup-go/pull/586
• Update template link by @​jsoref in https://github.com/actions/setup-go/pull/527

Dependency updates:

• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​aparnajyothi-y in https://github.com/actions/setup-go/pull/574
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in https://github.com/actions/setup-go/pull/573
• Upgrade ts-jest from 29.1.2 to 29.3.2 by @​dependabot in https://github.com/actions/setup-go/pull/582
• Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @​dependabot in https://github.com/actions/setup-go/pull/537

New Contributors

• @​jsoref made their first contribution in https://github.com/actions/setup-go/pull/527

Full Changelog: actions/setup-go@v5...v5.5.0

codecov/codecov-action (codecov/codecov-action)

v5.4.2

Compare Source

What's Changed

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.1..v5.4.2

v5.4.1

Compare Source

What's Changed

• fix: use the github core methods by @​thomasrockhu-codecov in https://github.com/codecov/codecov-action/pull/1807
• build(deps): bump github/codeql-action from 3.28.12 to 3.28.13 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1803
• build(deps): bump github/codeql-action from 3.28.11 to 3.28.12 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1797
• build(deps): bump actions/upload-artifact from 4.6.1 to 4.6.2 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1798
• chore(release): wrapper -0.2.1 by @​app/codecov-releaser-app in https://github.com/codecov/codecov-action/pull/1788
• build(deps): bump github/codeql-action from 3.28.10 to 3.28.11 by @​app/dependabot in https://github.com/codecov/codecov-action/pull/1786

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.4.0..v5.4.1

urfave/cli (github.com/urfave/cli/v3)

v3.3.3

Compare Source

What's Changed

• Simpler top-level context detection for fish completions by @​bittrance in https://github.com/urfave/cli/pull/2121
• Fish completion inside hidden commands by @​bittrance in https://github.com/urfave/cli/pull/2122
• chore(deps): bump golangci/golangci-lint-action from 7 to 8 by @​dependabot in https://github.com/urfave/cli/pull/2123
• fix: off-by-one in timestamp parsing by @​nickajacks1 in https://github.com/urfave/cli/pull/2127
• Fish completions tests invokes setup by @​bittrance in https://github.com/urfave/cli/pull/2124
• Fix docs by @​dearchap in https://github.com/urfave/cli/pull/2128

New Contributors

• @​nickajacks1 made their first contribution in https://github.com/urfave/cli/pull/2127

Full Changelog: urfave/cli@v3.3.2...v3.3.3

github/codeql-action (github/codeql-action)

v3.28.17

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.17 - 02 May 2025

• Update default CodeQL bundle version to 2.21.2. #​2872

See the full CHANGELOG.md for more information.

v3.28.16

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025

• Update default CodeQL bundle version to 2.21.1. #​2863

See the full CHANGELOG.md for more information.

go-gorm/gorm (gorm.io/gorm)

v1.26.1

Compare Source

Changes

• fix: int type variable defaultMaxSize overflows in 32-bit environment @​iTanken (#​7439)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 56.78%. Comparing base (cd2acb2) to head (508854e).
Report is 1 commits behind head on main.

❌ Your project status has failed because the head coverage (56.78%) is below the target coverage (90.00%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #1298   +/-   ##
=======================================
  Coverage   56.78%   56.78%           
=======================================
  Files         637      637           
  Lines       35700    35700           
=======================================
  Hits        20271    20271           
  Misses      14807    14807           
  Partials      622      622           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
golang.org/x/text	v0.24.0 -> v0.25.0