fix(deps): update dependencies (major)

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/checkout	action	major	v4.3.0 -> v5.0.0
actions/checkout	action	major	v4 -> v5
actions/download-artifact	action	major	v4 -> v5
actions/setup-go	action	major	v5 -> v6
github.com/google/go-github/v74	require	major	v74.0.0 -> v75.0.0
golangci/golangci-lint-action	action	major	v7 -> v8

---

Release Notes

actions/checkout (actions/checkout)

v5.0.0

Compare Source

What's Changed

• Update actions checkout to use node 24 by @​salmanmkc in https://github.com/actions/checkout/pull/2226
• Prepare v5.0.0 release by @​salmanmkc in https://github.com/actions/checkout/pull/2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

actions/download-artifact (actions/download-artifact)

v5

Compare Source

actions/setup-go (actions/setup-go)

v6

Compare Source

google/go-github (github.com/google/go-github/v74)

v75.0.0

Compare Source

This release contains the following breaking API changes:

• refactor!: Change GitService methods to pass required params by-value instead of by-ref (#​3654)
  BREAKING CHANGE: GitService methods now pass required params by-value instead of by-ref.

...and the following additional changes:

• Bump go-github from v73 to v74 in /scrape (#​3639)
• Add the metadata field to create DependencyGraphSnapshot (#​3640)
• Bump golangci-lint to 2.3.0 (#​3641)
• Add additional settings fields to org API (#​3642)
• docs: Extend the description of ref parameters (#​3643)
• fix: Add validation for nil inputs in various services (#​3636)
• Add location info to SecretScanningAlert (#​3645)
• docs: Update links to use the latest version of GitHub documentation (#​3648)
• Add FieldValue field to ProjectV2ItemChange event. (#​3650)
• Add Metadata field to DependencyGraph* structs (#​3653)
• refactor: Fix gocritic.paramTypeCombine lint issues (#​3655)
• chore: Show correct path when example has lint errors (#​3656)
• Add Social Accounts API (#​3647)
• feat: Implement List Repository Activities endpoint (#​3651)
• docs: Use secure URLs in string literals (#​3657)
• feat: Update openapi (#​3662)
• feat: Add artifact and log retention period API support (#​3664)
• Document upcoming changes to events payload (#​3667)
• build(deps): Bump the actions group with 2 updates (#​3670)
• build(deps): Bump golang.org/x/net from 0.42.0 to 0.43.0 in /scrape (#​3669)
• fix: Replace 'organizations' with 'orgs' in API endpoints (#​3673)
• Update AUTHORS (#​3674)
• feat: Add secret scanning push protection pattern configurations API (#​3672)
• feat: Add self-hosted runner permission API support (#​3675)
• chore: Do not force Go 1.22.0 as toolchain version (#​3678)
• feat: Add GitHub Classroom GetAssignment API endpoint (#​3685)
• chore: Add new lint rule to make sure exported names documented (#​3682)
• chore: Enable gocritic.deprecatedComment check (#​3688)
• chore: Format code with gofumpt (#​3689)
• feat: Add private repo workflows permission API support (#​3679)
• chore: Replace reflect.DeepEqual with cmp.Equal in tests (#​3691)
• docs: Update CONTRIBUTING.md to clarify documentation requirements for exported types (#​3693)
• build(deps): Bump github.com/getkin/kin-openapi from 0.132.0 to 0.133.0 in /tools (#​3698)
• build(deps): Bump actions/setup-go from 5.5.0 to 6.0.0 in the actions group (#​3709)
• build(deps): Bump codecov/codecov-action from 5.4.3 to 5.5.1 (#​3711)
• build(deps): Bump golang.org/x/net from 0.43.0 to 0.44.0 in /scrape (#​3716)
• Add exempt as bypass mode to ruleset bypass actors (#​3719)
• Bump Go toolchain to 1.24 (#​3721)
• Bump golang.org/x/sync from 0.16.0 to 0.17.0 in /tools (#​3722)
• Bump version of go-github to v75.0.0 (#​3723)

golangci/golangci-lint-action (golangci/golangci-lint-action)

v8

Compare Source

---

Configuration

📅 Schedule: Branch creation - Between 08:00 AM and 08:59 AM, on day 1 of the month ( * 8 1 * * ) in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.