chore(deps): update hashicorp/vault-action action to v4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
hashicorp/vault-action	action	major	v3.4.0 → v4.0.0

---

Release Notes

hashicorp/vault-action (hashicorp/vault-action)

v4.0.0

Compare Source

4.0.0 (May 12, 2026)

Improvements:

• Bump node runtime from node20 to node24 GH-604
• Fix leading slash in secret paths causing HTTP 400 errors (e.g. /cubbyhole/test → v1/cubbyhole/test instead of v1//cubbyhole/test)
• bump jsrsasign from 11.1.0 to 11.1.3
• bump body-parser from 1.20.3 to 1.20.5
• bump qs from 6.13.0 to 6.15.1
• bump http-errors from 2.0.0 to 2.0.1
• bump minimatch from 3.1.2 to 3.1.5
• bump underscore from 1.13.4 to 1.13.8

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
  • Only on Sunday and Saturday (* * * * 0,6)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[bito-code-review]

Review Skipped - Label Excluded

Bito didn't auto-review this change because the PR contains excluded label: renovate.
No action is needed if you didn't intend for the agent to review it. To trigger a review manually, type /review in a comment and save.

You can change this by removing the label from Filters → Exclude Labels setting here, or from the labels_excluded field in the .bito.yaml file (if repo-level configurations are enabled), or contact your workspace admin at michael.pearce@contentful.com.