chore: bump up all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
cross-platform-actions/action	action	minor	v1.3.0 → v1.6.0
yarn (source)	packageManager	minor	4.17.1 → 4.18.1

---

Release Notes

cross-platform-actions/action (cross-platform-actions/action)

v1.6.0: Cross Platform Action 1.6.0

Compare Source

Added

• Add support for FreeBSD 14.5 (#​168)
• Add support for NetBSD 9.5

Fixed

• DragonFly BSD guests no longer occasionally start a job without working
  connectivity (#​164).
  The image configured its interface with dhclient, which daemonizes before
  the DHCP exchange finishes, so the boot never waited for the network and the
  first step could run while the guest still had no route off its own subnet.
  The image now configures the interface statically, from the lease user mode
  networking hands out identically on every boot

v1.5.0: Cross Platform Action 1.5.0

Compare Source

Changed

• NetBSD images download around 45% smaller -- 11.0 x86-64 goes from 497 MiB to
  268 MiB -- which is most of what a NetBSD job spends on setup
  (#​151)
• Every guest becomes usable sooner, by up to 8 seconds, because the action no
  longer waits on a readiness probe it sent before the guest was listening
• NetBSD guests are logged into without a credential, so no SSH key is generated
  and no resources disk is built to carry one. A custom image supplied through
  image_url still gets both, since it may expect them

Added

• Add support for Haiku R1/beta6
  (#​165)
• A variant input, selecting a named configuration of a platform. Defaults to
  default, which boots exactly as before, so no existing workflow changes.
  See Variants
• The microvm variant for NetBSD on x86-64, which reaches a usable guest in
  roughly half the time. It is opt-in because it changes the hardware the guest
  sees: the root disk becomes ld0 rather than sd0, there is no PCI bus to
  inspect, and uname -v reports a MICROVM kernel. Asking for it where it
  cannot be booted is an error, not a slow boot
• Log a breakdown of how long each phase of setting up the VM took, together
  with how long the VM took to become reachable over SSH

Fixed

• 5-level paging (LA57) is no longer exposed to the guests on x86-64
  (#​158).
  FreeBSD 13.0 enables 5-level paging whenever the CPU reports it and panics
  in the trampoline that switches to it, so every job that landed on an Intel
  runner from Ice Lake onwards failed to boot
• STIBP always-on mode is no longer exposed to the guests on x86-64
  (#​158). Some
  of the AMD runners report it without the STIBP and IBRS bits that normally
  come with it, which made DragonFly BSD write IA32_SPEC_CTRL and take a
  general protection fault while booting

Security

• The guest's SSH port is only forwarded to the runner's loopback address. It was
  previously bound to every interface, making the guest reachable from anything
  that could reach the runner

v1.4.0: Cross Platform Action 1.4.0

Compare Source

Added

• Add support for FreeBSD on RISC-V 64 (riscv64) (#​36)
• Add support for NetBSD on VAX, running on the SIMH simulator
• Add support for NetBSD 11.0 (#​154)

Changed

• OpenBSD on ARM64 now boots with the same EDK II UEFI firmware (uefi.fd) as
  every other ARM64 guest, instead of a separate Linaro UEFI build. The QEMU
  machine type for OpenBSD on ARM64 is now virt,acpi=off, which makes the
  kernel fall back to the device tree instead of hanging during ACPI attach.
  This removes the dependency on the Linaro release server, which no longer
  exists

Fixed

• Don't log the Tearing down VM group when shutdown_vm is false, since
  the VM is not being torn down in that case
  (#​109)
• The "Start VM" step could keep running for hours when the VM failed to boot
  (#​158).
  Waiting for the VM to become ready is now bounded by an actual wall clock
  timeout, instead of by a number of connection attempts, and a single SSH
  connection attempt is bounded by ConnectTimeout.
• The post job step now reports when the console log of the VM is missing or
  empty, instead of silently printing nothing
  (#​158)
• A reboot of a guest that dies instead of rebooting now fails after roughly
  20 seconds, instead of after 13 minutes. The SSH session that issues the
  reboot is bounded by ServerAliveInterval, so it no longer blocks for the
  full TCP retransmission time, and waiting for the VM to come back up is
  given up on as soon as the guest announces a kernel panic on its serial
  console
• Advanced Matrix Extensions (AMX) is no longer exposed to the guests on
  x86-64, so which runner a job happens to get no longer decides whether the
  VM boots
  (#​158).
  Kernels released before AMX existed fault as soon as userland starts, which
  affected NetBSD 9.4 and 10.1 and FreeBSD 12.4 on the runners that have it

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.