fix(deps): update update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/setup-go	action	minor	v6.3.0 → v6.4.0
codecov/codecov-action (changelog)	action	digest	671740a → 75cd116
docker.io/grafana/k6	stage	minor	1.6.1 → 1.7.1
elgohr/Publish-Docker-Github-Action	action	pinDigest	→ 8217e91
github.com/go-vela/server	require	minor	v0.27.5 → v0.28.0
reviewdog/action-golangci-lint (changelog)	action	digest	f9bba13 → c76ccea

---

Release Notes

actions/setup-go (actions/setup-go)

v6.4.0

Compare Source

What's Changed

Enhancement

• Add go-download-base-url input for custom Go distributions by @​gdams in #​721

Dependency update

• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in #​727

Documentation update

• Rearrange README.md, add advanced-usage.md by @​priyagupta108 in #​724
• Fix Microsoft build of Go link by @​gdams in #​734

New Contributors

• @​gdams made their first contribution in #​721

Full Changelog: actions/setup-go@v6...v6.4.0

go-vela/server (github.com/go-vela/server)

v0.28.0

Compare Source

What's Changed

• enhance(oidc): add jti claim by @​ecrupper in #​1356
• feat!: remove buildkite dependency by @​ecrupper in #​1352
• fix(compiler): prevent same-name stages in pipeline configs by @​ecrupper in #​1360
• fix(api): yaml expand on stage pipelines by @​wass3r in #​1363
• enhance(api)!: accept installation tokens for MustWrite and MustRead auth using caching by @​ecrupper in #​1373
• fix(mock): add refresh install token mock by @​ecrupper in #​1374
• fix(scm): proper expiration set to worker by @​ecrupper in #​1380
• fix(deps): bump aws-sdk to v2 by @​wass3r in #​1365
• fix(database)!: use transactions tied to repo counters for hook and build to avoid collisions by @​ecrupper in #​1353
• fix(scm): fall back on github info if role map missing entry by @​ecrupper in #​1382
• fix(deps): update module github.com/expr-lang/expr to v1.17.7 [security] by @​renovate[bot] in #​1379
• chore(build): reduce binary size by @​wass3r in #​1377
• chore: bump go-github to v81 by @​ecrupper in #​1383
• fix(deps): update module golang.org/x/crypto to v0.45.0 [security] by @​renovate[bot] in #​1370
• feat!: platform setting for enabling/disabling Vela secrets by @​ecrupper in #​1384
• fix(scm): add deployments as a default perm for deploy events by @​ecrupper in #​1386
• feat(events)!: support merge queue for GitHub SCM by @​ecrupper in #​1343
• fix(compiler): add origin secrets to pipeline validate func by @​ecrupper in #​1388
• enhance(app): add PR and Issue perms for install token by @​ecrupper in #​1389
• enhance(compiler)!: do not add duplicate origin secrets using name as key by @​ecrupper in #​1390
• chore(lint): update codebase for new linter rules by @​ecrupper in #​1393
• feat(artifacts): Object storage integration and artifacts key by @​KellyMerrick in #​1385
• feat: leverage checks API for CI statuses with app installation by @​ecrupper in #​1392
• fix(deps): update module github.com/google/go-github/v81 to v83 by @​renovate[bot] in #​1391
• fix(scm): add merge_group to events set by @​ecrupper in #​1394
• chore(deps): upgrade minor deps and apply some go fix changes by @​ecrupper in #​1395
• chore(deps): update actions/checkout action to v6 by @​renovate[bot] in #​1371
• chore(deps): update github/codeql-action action to v4 by @​renovate[bot] in #​1358
• chore(deps): update actions/github-script action to v8 by @​renovate[bot] in #​1349
• chore(deps): update actions/setup-go action to v6 by @​renovate[bot] in #​1348
• fix(artifacts): add upload to storage service by @​timhuynh94 in #​1397
• fix(deps): update all non-major dependencies by @​renovate[bot] in #​1396
• fix(scm): override details link to point to vela build by @​ecrupper in #​1400
• fix(artifacts): switch from sts to presigned put by @​timhuynh94 in #​1401
• fix(build): reset build number for restarts by @​ecrupper in #​1404
• fix(revert): use commit status API only by @​ecrupper in #​1405
• refactor(compiler): move script gen outside of compiler and into container by @​ecrupper in #​1403
• fix(env): remove id request url from compiler by @​ecrupper in #​1408
• fix(perm): allow for GETs when secrets are disabled by @​ecrupper in #​1406
• fix(deps): update all non-major dependencies by @​renovate[bot] in #​1398
• fix(deps): update module github.com/google/go-github/v83 to v84 by @​renovate[bot] in #​1399
• chore(deps): update docker/login-action action to v4 by @​renovate[bot] in #​1402
• chore(deps): update docker/metadata-action action to v6 by @​renovate[bot] in #​1407
• chore(deps): update docker/build-push-action action to v7 by @​renovate[bot] in #​1409
• chore(deps): bump go to 1.26.1 by @​wass3rw3rk in #​1410
• fix(webhook): generate token for status update on failed compile by @​ecrupper in #​1412
• fix(deps): update all non-major dependencies by @​renovate[bot] in #​1411
• fix: add clearer error message for post-subst unmarshal issues by @​ecrupper in #​1415
• fix(merge_group): set branch to base ref instead of head ref by @​ecrupper in #​1414
• fix(db): only update fields when necessary for repo hot path writes by @​ecrupper in #​1416
• fix(deps): update all non-major dependencies by @​renovate[bot] in #​1413
• fix(admin): add logs for secret toggles by @​wass3rw3rk in #​1419
• enhance: separate clone/build SCM token from status token by @​ecrupper in #​1420
• fix(deps): update all non-major dependencies by @​renovate[bot] in #​1417
• chore(deps): bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @​dependabot[bot] in #​1418
• chore(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 by @​dependabot[bot] in #​1421
• fix(webhook): use webhook parsed build info on compile failures for status by @​ecrupper in #​1422
• fix: use install token if available for changeset call by @​ecrupper in #​1424
• fix(deps): update all non-major dependencies by @​renovate[bot] in #​1423
• chore(deps): update codecov/codecov-action action to v6 by @​renovate[bot] in #​1425
• fix(util): use filepath matching for allowlist by @​ecrupper in #​1426

Full Changelog: go-vela/server@v0.27.5...v0.28.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 3 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.25.7 -> 1.26.1
github.com/davecgh/go-spew	v1.1.1 -> v1.1.2-0.20180830191138-d8f796af33cc
github.com/pmezard/go-difflib	v1.0.0 -> v1.0.1-0.20181226105442-5d4384ee4fb2
golang.org/x/sys	v0.39.0 -> v0.42.0