chore(deps): bump the github-actions group with 4 updates

[dependabot]

Bumps the github-actions group with 4 updates: actions/checkout, github/codeql-action, crate-ci/typos and DataDog/dd-trace-go/.github/workflows/orchestrion.yml.

Updates actions/checkout from 6.0.1 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

• Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @​TingluoHuang in actions/checkout#2355
• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

• Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

• Persist creds to a separate file by @​ericsciple in actions/checkout#2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

• Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

• Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

• Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

• docs: update README.md by @​motss in actions/checkout#1971
• Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
• Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
• Update README.md by @​nebuk89 in actions/checkout#2194
• Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
• Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

• url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
• Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

v4.2.0

• Add Ref and Commit outputs by @​lucacome in actions/checkout#1180
• Dependency updates by @​dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
• Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
• Check out other refs/* by commit by @​orhantoy in actions/checkout#1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in actions/checkout#1776

v4.1.6

• Check platform to set archive extension appropriately by @​cory-miller in actions/checkout#1732

... (truncated)

Commits

• de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
• 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
• See full diff in compare view

Updates github/codeql-action from 4.31.10 to 4.31.11

Release notes

Sourced from github/codeql-action's releases.

v4.31.11

• When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409
• Improved error handling throughout the CodeQL Action. #3415
• Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318
• The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

• Update default CodeQL bundle version to 2.24.0. #3425

4.31.11 - 23 Jan 2026

• When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409
• Improved error handling throughout the CodeQL Action. #3415
• Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318
• The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

4.31.10 - 12 Jan 2026

• Update default CodeQL bundle version to 2.23.9. #3393

4.31.9 - 16 Dec 2025

No user facing changes.

4.31.8 - 11 Dec 2025

• Update default CodeQL bundle version to 2.23.8. #3354

4.31.7 - 05 Dec 2025

• Update default CodeQL bundle version to 2.23.7. #3343

4.31.6 - 01 Dec 2025

No user facing changes.

4.31.5 - 24 Nov 2025

• Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

No user facing changes.

4.31.3 - 13 Nov 2025

• CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
• Update default CodeQL bundle version to 2.23.5. #3288

4.31.2 - 30 Oct 2025

... (truncated)

Commits

• 19b2f06 Merge pull request #3417 from github/update-v4.31.11-1601acf88
• 03afde0 Add noteworthy changes to changelog
• 9469107 Update changelog for v4.31.11
• 1601acf Merge pull request #3415 from github/henrymercer/address-telemetry-gap
• fba7872 Address review comments
• a8dd5ab Merge pull request #3414 from github/dependabot/npm_and_yarn/lodash-4.17.23
• 28bfb7b Omit error from start-proxy Action
• 91f3460 Throw if in test mode
• edebb78 Differentiate unhandled errors in telemetry
• 529c266 Use getErrorMessage in more places
• Additional commits viewable in compare view

Updates crate-ci/typos from 1.42.1 to 1.42.2

Release notes

Sourced from crate-ci/typos's releases.

v1.42.2

[1.42.2] - 2026-01-26

Fixes

• Don't correct substituters

Changelog

Sourced from crate-ci/typos's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[Unreleased] - ReleaseDate

[1.42.2] - 2026-01-26

Fixes

• Don't correct substituters

[1.42.1] - 2026-01-19

Fixes

• Ignore hex literals with suffixes (e.g. 0xffffUL)

[1.42.0] - 2026-01-07

Features

• Dictionary updates

[1.41.0] - 2025-12-31

Features

• Updated the dictionary with the December 2025 changes

[1.40.1] - 2025-12-29

Fixes

• Treat incrementer and incrementor the same for now

Fixes

• Don't correct ITerm2

[1.40.0] - 2025-11-26

Features

• Updated the dictionary with the November 2025 changes

[1.39.2] - 2025-11-13

... (truncated)

Commits

• a1d6497 chore: Release
• 36a2bf8 docs: Update changelog
• 86e61a1 Merge pull request #1475 from kachick/restore-substituters
• 5b5d298 fix(dict): Don't correct substituters
• See full diff in compare view

Updates DataDog/dd-trace-go/.github/workflows/orchestrion.yml from e5d6064117ee77b1dc688a3257fb3f5230e4ec24 to e3349082ecb3db03a872e6ce8b5dfcbbe7d7707a

Commits

• e334908 chore(internal/config): cover #4373 changes (#4376)
• ec9b4ab fix(internal/config): fix hostname lookup (#4373)
• 86c9a30 fix(appsec): lowercase downstream request headers for WAF (#4367)
• 84f05f2 ci: update config inversion CI scripts settings (#4365)
• ab1378a fix(remoteconfig): prevent targets_version reset and always report config_sta...
• 733313c ci: upload test reports for appsec tests (#4323)
• 8f4902e chore: use (again) registry.datadoghq.com to pull agent in CI (#4357)
• 05a4c18 refactor(instrumentation/mcp): replace ddtrace argument with telemetry (#...
• 49b7ca5 chore(ddtrace/tracer): add checkatomic annotations (#4363)
• dc7777e chore(ddtrace/tracer): migrate to locking.*Mutex to enable dynamic lock check...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.48%. Comparing base (e061d12) to head (5e21648).
⚠️ Report is 54 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #775      +/-   ##
==========================================
+ Coverage   65.72%   69.48%   +3.76%     
==========================================
  Files         113      116       +3     
  Lines        7926     6891    -1035     
==========================================
- Hits         5209     4788     -421     
+ Misses       2192     1557     -635     
- Partials      525      546      +21     

Components	Coverage Δ
Generators	83.23% <ø> (+2.98%)	⬆️
Instruments	∅ <ø> (∅)
Go Driver	75.80% <65.38%> (-0.02%)	⬇️
Toolexec Driver	74.73% <100.00%> (+7.20%)	⬆️
Aspects	76.75% <76.37%> (+4.83%)	⬆️
Injector	76.99% <77.04%> (+4.19%)	⬆️
Job Server	67.72% <55.55%> (+1.80%)	⬆️
Other	69.48% <64.89%> (+3.76%)	⬆️
see 108 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.