chore(deps): update all non-major dependencies

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
GoogleCloudPlatform/functions-framework-conformance	action	patch	v1.8.6 -> v1.8.7
actions/checkout	action	minor	v4.2.2 -> v4.3.0
actions/dependency-review-action	action	patch	v4.7.1 -> v4.7.3
github/codeql-action	action	patch	v3.29.2 -> v3.29.11
step-security/harden-runner	action	minor	v2.12.2 -> v2.13.0

---

Release Notes

GoogleCloudPlatform/functions-framework-conformance (GoogleCloudPlatform/functions-framework-conformance)

v1.8.7

Compare Source

What's Changed

• build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.11.0 by @​dependabot[bot] in #​133
• build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by @​dependabot[bot] in #​134
• build(deps): bump @​actions/core from 1.2.6 to 1.9.1 in /action by @​dependabot[bot] in #​116
• build(deps-dev): bump word-wrap from 1.2.3 to 1.2.4 in /action by @​dependabot[bot] in #​127
• build(deps): bump github.com/containerd/containerd from 1.7.2 to 1.7.11 by @​dependabot[bot] in #​132
• build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 by @​dependabot[bot] in #​139
• build(deps): bump github.com/opencontainers/runc from 1.1.7 to 1.1.14 by @​dependabot[bot] in #​145
• build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by @​dependabot[bot] in #​146
• build(deps): bump golang.org/x/net from 0.19.0 to 0.33.0 by @​dependabot[bot] in #​148
• build(deps): bump github.com/go-git/go-git/v5 from 5.11.0 to 5.13.0 by @​dependabot[bot] in #​149
• chore: Configure Renovate by @​renovate-bot in #​142
• fix(deps): update module github.com/cloudevents/sdk-go/v2 to v2.15.2 [security] by @​renovate-bot in #​150
• chore(deps): update dependency @​types/node to v14.18.63 by @​renovate-bot in #​151
• chore: Update go.mod to use 1.21.13 by @​akerekes in #​153
• chore(deps): update actions/cache action to v4 by @​renovate-bot in #​158
• chore(deps): update actions/upload-artifact action to v4 by @​renovate-bot in #​162
• fix: Update buildpack-integration-test.yml by @​akerekes in #​165
• fix: update builer image url by @​akerekes in #​177

New Contributors

• @​renovate-bot made their first contribution in #​142
• @​akerekes made their first contribution in #​153

Full Changelog: GoogleCloudPlatform/functions-framework-conformance@v1.8.6...v1.8.7

actions/checkout (actions/checkout)

v4.3.0

Compare Source

What's Changed

• docs: update README.md by @​motss in https://github.com/actions/checkout/pull/1971
• Add internal repos for checking out multiple repositories by @​mouismail in https://github.com/actions/checkout/pull/1977
• Documentation update - add recommended permissions to Readme by @​benwells in https://github.com/actions/checkout/pull/2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in https://github.com/actions/checkout/pull/2044
• Update README.md by @​nebuk89 in https://github.com/actions/checkout/pull/2194
• Update CODEOWNERS for actions by @​TingluoHuang in https://github.com/actions/checkout/pull/2224
• Update package dependencies by @​salmanmkc in https://github.com/actions/checkout/pull/2236
• Prepare release v4.3.0 by @​salmanmkc in https://github.com/actions/checkout/pull/2237

New Contributors

• @​motss made their first contribution in https://github.com/actions/checkout/pull/1971
• @​mouismail made their first contribution in https://github.com/actions/checkout/pull/1977
• @​benwells made their first contribution in https://github.com/actions/checkout/pull/2043
• @​nebuk89 made their first contribution in https://github.com/actions/checkout/pull/2194
• @​salmanmkc made their first contribution in https://github.com/actions/checkout/pull/2236

Full Changelog: actions/checkout@v4...v4.3.0

actions/dependency-review-action (actions/dependency-review-action)

v4.7.3: 4.7.3

Compare Source

What's Changed

• Add explicit permissions to workflow files by @​AshelyTC in #​966
• Claire153/fix spamming mentioned issue by @​claire153 in #​974

Full Changelog: actions/dependency-review-action@v4...v4.7.3

v4.7.2: 4.7.2

Compare Source

What's Changed

• Add Missing Languages to CodeQL Advanced Configuration by @​KyFaSt in #​945
• Deprecate deny lists by @​claire153 in #​958
• Address discrepancy between docs and reality by @​ahpook in #​960

New Contributors

• @​KyFaSt made their first contribution in #​945
• @​claire153 made their first contribution in #​958
• @​ahpook made their first contribution in #​960

Full Changelog: actions/dependency-review-action@v4...v4.7.2

github/codeql-action (github/codeql-action)

v3.29.11

Compare Source

v3.29.10

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.10 - 18 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.9 - 12 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.8 - 08 Aug 2025

• Fix an issue where the Action would autodetect unsupported languages such as HTML. #​3015

See the full CHANGELOG.md for more information.

v3.29.7

Compare Source

This is a re-release of v3.29.5 to mitigate an issue that was discovered with v3.29.6.

v3.29.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.6 - 07 Aug 2025

• The cleanup-level input to the analyze Action is now deprecated. The CodeQL Action has written a limited amount of intermediate results to the database since version 2.2.5, and now automatically manages cleanup. #​2999
• Update default CodeQL bundle version to 2.22.3. #​3000

See the full CHANGELOG.md for more information.

v3.29.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.5 - 29 Jul 2025

• Update default CodeQL bundle version to 2.22.2. #​2986

See the full CHANGELOG.md for more information.

v3.29.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.4 - 23 Jul 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.29.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.3 - 21 Jul 2025

No user facing changes.

See the full CHANGELOG.md for more information.

step-security/harden-runner (step-security/harden-runner)

v2.13.0

Compare Source

What's Changed

• Improved job markdown summary
• Https monitoring for all domains (included with the enterprise tier)

Full Changelog: step-security/harden-runner@v2...v2.13.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.