chore(deps): update github-actions versions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	7.0.0 → 7.0.1
actions/setup-node	action	minor	6.4.0 → 6.5.0
amannn/action-semantic-pull-request	action	minor	v6 → v6.1.1
oven-sh/setup-bun	action	minor	2.0.2 → 2.2.0

Warnings (1)

Please correct - or verify that you can safely ignore - these warnings before you merge this PR.

• actions/checkout: Could not determine new digest for update (github-tags package actions/checkout)

---

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

• Bump github/codeql-action from 3 to 4 by @​dependabot[bot] in #​2475
• Bump actions/setup-node from 4 to 6 by @​dependabot[bot] in #​2477
• Bump docker/build-push-action from 6.5.0 to 7.2.0 by @​dependabot[bot] in #​2478
• Bump docker/login-action from 3.3.0 to 4.2.0 by @​dependabot[bot] in #​2479
• Bump actions/checkout from 6 to 7 by @​dependabot[bot] in #​2488
• Bump actions/upload-artifact from 4 to 7 by @​dependabot[bot] in #​2476
• eslint 9 by @​dependabot[bot] in #​2474
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot[bot] in #​2499
• skip running unsafe pr check if input is default by @​aiqiaoy in #​2518
• trim only ascii whitespace for branch by @​aiqiaoy in #​2521
• escape values passed to --unset by @​aiqiaoy in #​2530

actions/setup-node (actions/setup-node)

v6.5.0

Compare Source

What's Changed

• Update @​actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @​HarithaVattikuti in #​1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

amannn/action-semantic-pull-request (amannn/action-semantic-pull-request)

v6.1.1

Compare Source

Bug Fixes

• Parse headerPatternCorrespondence properly (#​295) (800da4c)

v6.1.0

Compare Source

Features

• Support providing regexps for types (#​292) (a30288b)

Bug Fixes

• Remove trailing whitespace from "unknown release type" error message (#​291) (afa4edb)

v6.0.1

Compare Source

Bug Fixes

• Actually execute action (#​289) (58e4ab4)

oven-sh/setup-bun (oven-sh/setup-bun)

v2.2.0

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

• build: update action runtime to Node.js 24 by @​adam0white in #​176
• ci: use actions/checkout@v6.0.2 in the test workflow by @​tcely in #​173
• ci: update actions for the autofix.ci workflow by @​tcely in #​174
• ci: update actions for the Release new action version workflow by @​tcely in #​175
• release: v2.2.0 by @​xhyrom in #​177

New Contributors

• @​adam0white made their first contribution in #​176
• @​tcely made their first contribution in #​173

Full Changelog: oven-sh/setup-bun@v2...v2.2.0

v2.1.3

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

• perf: avoid unnecessary api calls by @​xhyrom in #​161
• feat: add bun- prefix to cache keys by @​maschwenk in #​160
• fix: use native Windows ARM64 binary for Bun >= 1.3.10 by @​oddrationale in #​165
• feat: add AVX2 support detection for x64 Linux systems by @​GoForceX in #​167
• fix: validate cached binary version matches requested version (#​146) by @​wyMinLwin in #​169
• release: v2.1.3 by @​xhyrom in #​170

New Contributors

• @​oddrationale made their first contribution in #​165
• @​GoForceX made their first contribution in #​167
• @​wyMinLwin made their first contribution in #​169

Full Changelog: oven-sh/setup-bun@v2...v2.1.3

v2.1.2

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

• fix: default token only on public github instance by @​xhyrom in #​157

Full Changelog: oven-sh/setup-bun@v2...v2.1.2

v2.1.1

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

• feat: implement wildcard resolution into the action by @​xhyrom in #​93
• feat: fallback arm64 to x64 architecture for win32 platform by @​xhyrom in #​131
• feat: use packageManager from package.json as default bun version by @​xhyrom in #​152
• bump the form-data dependency to version v4.0.5 due to GHSA-fjxv-7rqg-78g4 by @​Jarred-Sumner

Full Changelog: oven-sh/setup-bun@v2.1.0...v2.1.1

v2.1.0

Compare Source

oven-sh/setup-bun is the github action for setting up Bun.

What's Changed

• chore: add settings for vscode by @​okineadev in #​120
• feat: support for multiple registries by @​xhyrom in #​109
• feat: read engines from package json by @​xhyrom in #​132
• ci: disable tests with version selectors by @​xhyrom in #​133
• chore(ci): Pin GitHub Actions to SHA-1s by @​dgilmanuni in #​140
• feat: Check for existing bun before downloading by @​erikaxel in #​138
• docs: restore missing no-cache input by @​bashonly in #​149
• release: v2.1.0 by @​xhyrom in #​151

New Contributors

• @​dgilmanuni made their first contribution in #​140
• @​erikaxel made their first contribution in #​138
• @​bashonly made their first contribution in #​149

Full Changelog: oven-sh/setup-bun@v2...v2.1.0

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • "on the 15th day of the month before 12pm"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[greptile-apps]

Greptile Summary

This PR updates SHA-pinned GitHub Actions used by CI and release workflows.

• Updates actions/checkout from 7.0.0 to 7.0.1 across lint, test, release, and analysis jobs.
• Updates oven-sh/setup-bun from 2.0.2 to 2.2.0 while retaining Bun 1.3.14.
• Updates actions/setup-node from 6.4.0 to 6.5.0 in npm publishing.
• Corrects the semantic pull-request action annotation to v6.1.1; its pinned SHA already referenced that release.

Confidence Score: 5/5

The PR appears safe to merge because the updated actions remain SHA-pinned and are compatible with the configured GitHub-hosted runners and toolchain inputs.

No concrete blocking or non-blocking defect remains; the workflows preserve their existing runners, inputs, permissions, and pinned Bun and Node versions.

Important Files Changed

Filename	Overview
.github/workflows/lint-pr-title.yml	Updates the version annotation to match the existing v6.1.1 commit pin without changing executed code.
.github/workflows/lint.yml	Updates checkout and Bun setup action pins while preserving the existing runner and Bun version.
.github/workflows/release.yml	Updates checkout, Bun setup, and Node setup action pins across release jobs without altering release inputs or permissions.
.github/workflows/socket-tier1-analysis.yml	Updates the checkout action patch version without changing analysis behavior.
.github/workflows/test.yml	Updates checkout and Bun setup action pins while retaining the existing test toolchain.

_{Reviews (1): Last reviewed commit: "chore(deps): update github-actions versi..." | Re-trigger Greptile}