chore(deps): update github-actions dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/upload-artifact	action	digest	b4b15b8 -> 65c4c4a
docker/setup-buildx-action	action	digest	c47758b -> 6524bf6
docker/setup-qemu-action	action	digest	49b3bc8 -> 53851d1
reviewdog/action-yamllint	action	minor	v1.16.0 -> v1.20.0

---

Release Notes

reviewdog/action-yamllint (reviewdog/action-yamllint)

v1.20.0

Compare Source

What's Changed

• Add fail_level and deduplicate fail_on_error by @​massongit in https://github.com/reviewdog/action-yamllint/pull/45

New Contributors

• @​massongit made their first contribution in https://github.com/reviewdog/action-yamllint/pull/45

Full Changelog: reviewdog/action-yamllint@v1.19.0...v1.20.0

v1.19.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.20.2 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/44

Full Changelog: reviewdog/action-yamllint@v1.18.0...v1.19.0

v1.18.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.20.1 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/41

Full Changelog: reviewdog/action-yamllint@v1.17.0...v1.18.0

v1.17.0

Compare Source

What's Changed

• chore(deps): update reviewdog to 0.19.0 by @​github-actions in https://github.com/reviewdog/action-yamllint/pull/40

Full Changelog: reviewdog/action-yamllint@v1.16.0...v1.17.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[village-labs-bot]

upbound/platform-ref-aws #210

Change Summary:

• Upgrading yamllint GitHub Action from version 1.16.0 to 1.19.0 by updating the commit hash reference in the CI workflow file

Potential Vulnerability:

• File: .github/workflows/yamllint.yaml:9
• Code: uses: reviewdog/action-yamllint@e09f07780388032a624e9eb44a23fd1bbb4052cc # v1.19.0
• Explanation: While updating dependencies is generally good practice, pinning to a specific commit hash should be validated to ensure it matches the official v1.19.0 release tag. Verify the commit hash corresponds to the official release to prevent supply chain attacks.

Code Smell:
No code smells identified in this change.

Debug Log:
No debug logs present in this change.

Unintended Consequences:

• File: .github/workflows/yamllint.yaml:9
• Code: uses: reviewdog/action-yamllint@e09f07780388032a624e9eb44a23fd1bbb4052cc # v1.19.0
• Explanation: Version updates in CI tools can sometimes introduce breaking changes or new default behaviors. The changelog between v1.16.0 and v1.19.0 should be reviewed to understand any potential changes in linting rules or behavior that could impact existing YAML files.

Risk Score: 3
The risk is relatively low as this is a minor version update to a YAML linting tool in the CI pipeline. The main concerns are verifying the commit hash and understanding any behavioral changes between versions.