deps: Update gha

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
JamesIves/github-pages-deploy-action	action	minor	v4.8.0 → v4.9.0
actions/attest-build-provenance	action	minor	v4.1.1 → v4.2.2
actions/checkout	action	patch	v7.0.0 → v7.0.1
prefix-dev/setup-pixi	action	patch	v0.10.0 → v0.10.2

---

Release Notes

JamesIves/github-pages-deploy-action (JamesIves/github-pages-deploy-action)

v4.9.0

Compare Source

What's Changed

Bug Fixes 🐝

• fix: use - instead of / in temporary deployment branch name by @​JamesIves with @​Copilot in #​1962

Build 🔧

• build(deps): bump actions/download-artifact from 7.0.0 to 8.0.1 by @​dependabot[bot] in #​1961
• build(deps-dev): bump jest-circus from 30.2.0 to 30.3.0 in the jest group by @​dependabot[bot] in #​1959
• build(deps): bump webfactory/ssh-agent from 0.9.1 to 0.10.0 by @​dependabot[bot] in #​1960
• build(deps): bump actions/setup-node from 6.1.0 to 6.3.0 by @​dependabot[bot] in #​1958
• build(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @​dependabot[bot] in #​1956
• build(deps): bump lodash from 4.17.21 to 4.17.23 by @​dependabot[bot] in #​1948
• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​1949
• build(deps): bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​1964
• build(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 by @​dependabot[bot] in #​1965
• build(deps): bump typescript-eslint from 8.52.0 to 8.53.0 in the typescript group by @​dependabot[bot] in #​1945
• build(deps): bump js-yaml from 3.13.1 to 3.14.2 by @​dependabot[bot] in #​1968
• build(deps): bump lodash from 4.17.23 to 4.18.1 by @​dependabot[bot] in #​1966
• build(deps): bump actions/checkout from 6.0.2 to 7.0.0 by @​dependabot[bot] in #​1992
• build(deps): bump undici from 6.24.1 to 6.27.0 by @​dependabot[bot] in #​1994
• build(deps): bump @​babel/core from 7.24.4 to 7.29.7 by @​dependabot[bot] in #​1991
• build(deps): bump codecov/codecov-action from 6.0.0 to 7.0.0 by @​dependabot[bot] in #​1988
• build(deps): bump js-yaml from 3.14.2 to 3.15.0 by @​dependabot[bot] in #​1995
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @​dependabot[bot] in #​1977

Other Changes

• chore: merge all open Dependabot dependency updates by @​JamesIves with @​Copilot in #​1967
• Update GitHub SSH known host keys by @​safeengineauto in #​1982

New Contributors

• @​safeengineauto made their first contribution in #​1982

Full Changelog: JamesIves/github-pages-deploy-action@v4...v4.9.0

actions/attest-build-provenance (actions/attest-build-provenance)

v4.2.2

Compare Source

[!NOTE]
As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

• Bump actions/attest from 4.2.0 to 4.2.1 in the actions-minor group by @​dependabot[bot] in #​862

Full Changelog: actions/attest-build-provenance@v4.1.1...v4.2.2

actions/checkout (actions/checkout)

v7.0.1

Compare Source

• Bump github/codeql-action from 3 to 4 by @​dependabot[bot] in #​2475
• Bump actions/setup-node from 4 to 6 by @​dependabot[bot] in #​2477
• Bump docker/build-push-action from 6.5.0 to 7.2.0 by @​dependabot[bot] in #​2478
• Bump docker/login-action from 3.3.0 to 4.2.0 by @​dependabot[bot] in #​2479
• Bump actions/checkout from 6 to 7 by @​dependabot[bot] in #​2488
• Bump actions/upload-artifact from 4 to 7 by @​dependabot[bot] in #​2476
• eslint 9 by @​dependabot[bot] in #​2474
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot[bot] in #​2499
• skip running unsafe pr check if input is default by @​aiqiaoy in #​2518
• trim only ascii whitespace for branch by @​aiqiaoy in #​2521
• escape values passed to --unset by @​aiqiaoy in #​2530

prefix-dev/setup-pixi (prefix-dev/setup-pixi)

v0.10.2

Compare Source

What's Changed

✨ New features

• feat: Add support for linux-riscv64 by @​pavelzw in #​282

Full Changelog: prefix-dev/setup-pixi@v0.10.1...v0.10.2

v0.10.1

Compare Source

What's Changed

⬆️ Dependency updates

• chore(deps): bump the nodejs group with 6 updates by @​dependabot[bot] in #​274
• chore(deps): bump the gh-actions group with 3 updates by @​dependabot[bot] in #​273
• chore(deps): bump the gh-actions group with 3 updates by @​dependabot[bot] in #​276

🤷🏻 Other changes

• Update dependencies and add pnpm workspace configuration by @​wolfv in #​279

New Contributors

• @​wolfv made their first contribution in #​279

Full Changelog: prefix-dev/setup-pixi@v0.10.0...v0.10.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • On day 15 of the month (* * 15 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.