chore(deps): update all non-major dependencies

[khepri-bot]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout	action	patch	v7.0.0 → v7.0.1
renovatebot/github-action	action	patch	v46.1.20 → v46.1.21	v46.2.2 (+2)

---

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

• Skip running unsafe pr check if input is default by @​aiqiaoy in #​2518
• Trim only ascii whitespace for branch by @​aiqiaoy in #​2521
• Escape values passed to --unset by @​aiqiaoy in #​2530
• Various dependency updates

renovatebot/github-action (renovatebot/github-action)

v46.1.21

Compare Source

Documentation

• mention that GITHUB_TOKEN can be used (#​1064) (13e8ee8)
• update references to actions/checkout to v6.1.0 (fab6a17)
• update references to renovatebot/github-action to v46.1.20 (9296462)

Miscellaneous Chores

• deps: update dependency lint-staged to v17.1.0 (f528fd4)
• deps: update dependency semantic-release to v25.0.7 (8771fb6)
• deps: update dependency semantic-release to v25.0.8 (9efb0fc)
• deps: update dependency typescript-eslint to v8.64.0 (4eed979)

Build System

• deps: lock file maintenance (6e7b049)

Continuous Integration

• deps: update actions/checkout action to v6.1.0 (c4fc050)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.1 (9355a07)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.3 (91aae03)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.4 (be1b582)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.5 (1885f40)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.6 (99c53af)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.9 (3946100)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.273.0 (143ca70)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.274.0 (b25398a)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.275.0 (d84cbc1)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.275.1 (42a4757)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.275.2 (f53dbc7)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.277.0 (091f8fd)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.277.1 (c5ab157)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.278.2 (0ffec41)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.278.3 (9586883)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.278.4 (a571ddf)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.278.5 (b018556)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.279.0 (f5099e2)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.279.1 (0a6a7a9)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.0 (c97e3db)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.2 (b8f0962)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.3 (1194ce5)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.4 (2fbf14d)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.5 (9f45e34)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.281.0 (e1ffcae)
• deps: update ghcr.io/renovatebot/renovate docker tag to v43.281.1 (8ebe465)
• deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.28.0 (#​1065) (05b68f0)
• deps: update zizmorcore/zizmor-action action to v0.6.1 (344a7d4)

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • Between 12:00 AM and 08:59 AM, only on Monday (* 0-8 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.