chore(deps): bump the github-actions group across 1 directory with 5 updates

[dependabot]

Bumps the github-actions group with 5 updates in the / directory:

Package	From	To
actions/checkout	6.0.1	6.0.2
github/codeql-action	4.31.10	4.32.1
crate-ci/typos	1.42.1	1.43.0
reviewdog/action-actionlint	1.69.1	1.70.0
DataDog/dd-trace-go/.github/workflows/orchestrion.yml	e5d6064117ee77b1dc688a3257fb3f5230e4ec24	85daf7cbba902c8e372fdaa16aa7d96352c85430

Updates actions/checkout from 6.0.1 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

• Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by @​TingluoHuang in actions/checkout#2355
• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

Full Changelog: actions/checkout@v6.0.1...v6.0.2

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

• Fix tag handling: preserve annotations and explicit fetch-tags by @​ericsciple in actions/checkout#2356

v6.0.1

• Add worktree support for persist-credentials includeIf by @​ericsciple in actions/checkout#2327

v6.0.0

• Persist creds to a separate file by @​ericsciple in actions/checkout#2286
• Update README to include Node.js 24 support details and requirements by @​salmanmkc in actions/checkout#2248

v5.0.1

• Port v6 cleanup to v5 by @​ericsciple in actions/checkout#2301

v5.0.0

• Update actions checkout to use node 24 by @​salmanmkc in actions/checkout#2226

v4.3.1

• Port v6 cleanup to v4 by @​ericsciple in actions/checkout#2305

v4.3.0

• docs: update README.md by @​motss in actions/checkout#1971
• Add internal repos for checking out multiple repositories by @​mouismail in actions/checkout#1977
• Documentation update - add recommended permissions to Readme by @​benwells in actions/checkout#2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in actions/checkout#2044
• Update README.md by @​nebuk89 in actions/checkout#2194
• Update CODEOWNERS for actions by @​TingluoHuang in actions/checkout#2224
• Update package dependencies by @​salmanmkc in actions/checkout#2236

v4.2.2

• url-helper.ts now leverages well-known environment variables by @​jww3 in actions/checkout#1941
• Expand unit test coverage for isGhes by @​jww3 in actions/checkout#1946

v4.2.1

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in actions/checkout#1924

v4.2.0

• Add Ref and Commit outputs by @​lucacome in actions/checkout#1180
• Dependency updates by @​dependabot- actions/checkout#1777, actions/checkout#1872

v4.1.7

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in actions/checkout#1739
• Bump actions/checkout from 3 to 4 by @​dependabot in actions/checkout#1697
• Check out other refs/* by commit by @​orhantoy in actions/checkout#1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in actions/checkout#1776

v4.1.6

• Check platform to set archive extension appropriately by @​cory-miller in actions/checkout#1732

... (truncated)

Commits

• de0fac2 Fix tag handling: preserve annotations and explicit fetch-tags (#2356)
• 064fe7f Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...
• See full diff in compare view

Updates github/codeql-action from 4.31.10 to 4.32.1

Release notes

Sourced from github/codeql-action's releases.

v4.32.1

• A warning is now shown in Default Setup workflow logs if a private package registry is configured using a GitHub Personal Access Token (PAT), but no username is configured. #3422
• Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. #3421

v4.32.0

• Update default CodeQL bundle version to 2.24.0. #3425

v4.31.11

• When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409
• Improved error handling throughout the CodeQL Action. #3415
• Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318
• The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

Changelog

Sourced from github/codeql-action's changelog.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

[UNRELEASED]

No user facing changes.

4.32.1 - 02 Feb 2026

• A warning is now shown in Default Setup workflow logs if a private package registry is configured using a GitHub Personal Access Token (PAT), but no username is configured. #3422
• Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. #3421

4.32.0 - 26 Jan 2026

• Update default CodeQL bundle version to 2.24.0. #3425

4.31.11 - 23 Jan 2026

• When running a Default Setup workflow with Actions debugging enabled, the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. #3409
• Improved error handling throughout the CodeQL Action. #3415
• Added experimental support for automatically excluding generated files from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. #3318
• The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. #3403

4.31.10 - 12 Jan 2026

• Update default CodeQL bundle version to 2.23.9. #3393

4.31.9 - 16 Dec 2025

No user facing changes.

4.31.8 - 11 Dec 2025

• Update default CodeQL bundle version to 2.23.8. #3354

4.31.7 - 05 Dec 2025

• Update default CodeQL bundle version to 2.23.7. #3343

4.31.6 - 01 Dec 2025

No user facing changes.

4.31.5 - 24 Nov 2025

• Update default CodeQL bundle version to 2.23.6. #3321

4.31.4 - 18 Nov 2025

... (truncated)

Commits

• 6bc82e0 Merge pull request #3447 from github/update-v4.32.1-f52cbc830
• 42f00f2 Add a couple of change notes
• cedee6d Update changelog for v4.32.1
• f52cbc8 Merge pull request #3445 from github/dependabot/npm_and_yarn/fast-xml-parser-...
• c5aaca4 Merge pull request #3446 from github/mbg/ci/pin-node-packages
• 3e58739 Pin @actions/tool-cache@3 in workflows to avoid failures with github-script
• a6ccefb Rebuild
• 0e64858 Bump fast-xml-parser from 5.3.3 to 5.3.4
• f985be5 Merge pull request #3443 from github/dependabot/npm_and_yarn/tar-7.5.7
• 0c8e06d Bump tar from 7.5.6 to 7.5.7
• Additional commits viewable in compare view

Updates crate-ci/typos from 1.42.1 to 1.43.0

Release notes

Sourced from crate-ci/typos's releases.

v1.43.0

[1.43.0] - 2026-02-02

Features

• Updated the dictionary with the January 2026 changes

v1.42.3

[1.42.3] - 2026-01-27

Fixes

• Don't correct loosing

v1.42.2

[1.42.2] - 2026-01-26

Fixes

• Don't correct substituters

Changelog

Sourced from crate-ci/typos's changelog.

Change Log

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[Unreleased] - ReleaseDate

[1.43.0] - 2026-02-02

Features

• Updated the dictionary with the January 2026 changes

[1.42.3] - 2026-01-27

Fixes

• Don't correct loosing

[1.42.2] - 2026-01-26

Fixes

• Don't correct substituters

[1.42.1] - 2026-01-19

Fixes

• Ignore hex literals with suffixes (e.g. 0xffffUL)

[1.42.0] - 2026-01-07

Features

• Dictionary updates

[1.41.0] - 2025-12-31

Features

• Updated the dictionary with the December 2025 changes

[1.40.1] - 2025-12-29

Fixes

• Treat incrementer and incrementor the same for now

... (truncated)

Commits

• 93cbdb2 chore: Release
• a13fcfa chore: Release
• e2dc298 docs: Update changelog
• 9192adc Merge pull request #1489 from epage/jan
• 4681e3a feat(dict): January updates
• 66a2f76 Merge pull request #1486 from crate-ci/renovate/actions-download-artifact-7.x
• 508d24d Merge pull request #1485 from crate-ci/renovate/actions-checkout-6.x
• 1fe0833 chore(deps): Update actions/download-artifact action to v7
• f1f7423 chore(deps): Update actions/checkout action to v6
• 3db9401 Merge pull request #1484 from crate-ci/renovate/maturin-1.x
• Additional commits viewable in compare view

Updates reviewdog/action-actionlint from 1.69.1 to 1.70.0

Release notes

Sourced from reviewdog/action-actionlint's releases.

Release v1.70.0

v1.70.0: PR #191 - chore(deps): update actionlint to 1.7.10

Commits

• e58ee9d bump v1.70.0
• 1d73978 Merge branch 'main' into releases/v1
• f4bb4d5 Merge pull request #191 from reviewdog/depup/actionlint
• 1c29cc9 chore(deps): update actionlint to 1.7.10
• See full diff in compare view

Updates DataDog/dd-trace-go/.github/workflows/orchestrion.yml from e5d6064117ee77b1dc688a3257fb3f5230e4ec24 to 85daf7cbba902c8e372fdaa16aa7d96352c85430

Commits

• 85daf7c chore(ci): fix test ownership attribution (#4382)
• 0295df4 chore(ci): disable gotip schedule (#4381)
• b6d67bc fix(mark3labs/mcp): fix concurrent writes bug in intent capture (#4362)
• 05378ec feat(civisibility): add test.final_status tag for adjusted test outcomes (#4379)
• b4bb7fe fix(civisibility): improve ci.job.url format for GitHub Actions (#4380)
• 437d647 feat(contrib/gomongodb.org/mongo-driver): add optional query tag truncation (...
• fa72b69 fix(contrib/aws/datadog-lambda-go): start tracer while initializing lambda li...
• e334908 chore(internal/config): cover #4373 changes (#4376)
• ec9b4ab fix(internal/config): fix hostname lookup (#4373)
• 86c9a30 fix(appsec): lowercase downstream request headers for WAF (#4367)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 69.56%. Comparing base (e061d12) to head (c95c6e4).
⚠️ Report is 54 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #777      +/-   ##
==========================================
+ Coverage   65.72%   69.56%   +3.84%     
==========================================
  Files         113      116       +3     
  Lines        7926     6891    -1035     
==========================================
- Hits         5209     4794     -415     
+ Misses       2192     1550     -642     
- Partials      525      547      +22     

Components	Coverage Δ
Generators	83.23% <ø> (+2.98%)	⬆️
Instruments	∅ <ø> (∅)
Go Driver	75.80% <65.38%> (-0.02%)	⬇️
Toolexec Driver	74.73% <100.00%> (+7.20%)	⬆️
Aspects	76.75% <76.37%> (+4.83%)	⬆️
Injector	76.99% <77.04%> (+4.19%)	⬆️
Job Server	68.38% <55.55%> (+2.46%)	⬆️
Other	69.56% <64.89%> (+3.84%)	⬆️
see 108 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.