chore(deps): update workflows

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/deploy-pages	action	patch	v5.0.0 → v5.0.1
docker/setup-qemu-action	action	minor	v4.2.0 → v4.3.0	v4.4.0
github/codeql-action	action	minor	v4.37.9 → v4.38.0	v4.38.1
ruby (source)	uses-with	patch	4.0.6 → 4.0.7
ruby/setup-ruby	action	minor	v1.321.0 → v1.322.0	v1.325.0 (+2)
zizmorcore/zizmor-action	action	patch	v0.6.2 → v0.6.4

---

Release Notes

actions/deploy-pages (actions/deploy-pages)

v5.0.1

Compare Source

Changelog

• Add backoff and jitter to deployment polling @​yoannchaudet (#​444)
• Improve deployment request test coverage @​adwitiyagoyal (#​440)

---

See details of all code changes since previous release.

⚠️ For use with products other than GitHub.com, such as GitHub Enterprise Server, please consult the compatibility table.

docker/setup-qemu-action (docker/setup-qemu-action)

v4.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.92.0 to 0.96.0 in #​336
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​316
• Bump brace-expansion from 1.1.15 to 1.1.18 in #​332
• Bump js-yaml from 4.2.0 to 4.3.1 in #​334
• Bump postcss from 8.5.10 to 8.5.25 in #​331
• Bump sigstore from 4.1.0 to 4.1.1 in #​317
• Bump undici from 6.27.0 to 6.28.0 in #​333

Full Changelog: docker/setup-qemu-action@v4.2.0...v4.3.0

github/codeql-action (github/codeql-action)

v4.38.0

Compare Source

• On GitHub-hosted runners, the CodeQL Action now deletes unused CodeQL bundles from the toolcache before downloading a different bundle, which frees up disk space for the analysis. We expect to roll this change out to everyone in September. #​4124
• The CodeQL Action now supports CodeQL releases that are compatible with Linux Arm64 and downloads the native linux-arm64 CodeQL bundle when available. #​4072
• Update default CodeQL bundle version to 2.27.0. #​4129

ruby/ruby (ruby)

v4.0.7: 4.0.7

Compare Source

What's Changed

• Bug #​22188: addr2line doesn't find symbols when compiled with GCC LTO - Ruby - Ruby Issue Tracking System
• Bug #​22210: Check if issue #​19969 is still reproducible / re-opened in 4.0.x - Ruby - Ruby Issue Tracking System
• Bug #​22217: Segmentation fault when resuming execution with Coverage.start and ruby/debug - Ruby - Ruby Issue Tracking System
• Fix formatting in ObjectSpace._id2ref error path by eregon · Pull Request #​18206
• Bug #​22200: ObjectSpace._id2ref can return a different object than the id's owner on Ruby 4.0 (stale id2ref_tbl entry for objects with generic fields) - Ruby - Ruby Issue Tracking System
• Bug #​22123: Ruby::Box + BUNDLER_SETUP can evaluate gemspecs before main-box RubyGems initialization - Ruby - Ruby Issue Tracking System
• Bump ERB to 6.0.7 by k0kubun · Pull Request #​18282
• Bug #​22237: GC.auto_compact corrupts a String or segfaults from String#tr with dup or gsub - Ruby - Ruby Issue Tracking System
• Bug #​22243: Change fork behavior when Process._fork raises an exception during fork with a block argument - Ruby - Ruby Issue Tracking System
• Bug #​22223: Socket.tcp with connect_timeout returns a phantom "connected" socket for a refused connection on macOS 27 (kernel answers EISCONN on connect retry; SO_ERROR never consulted) - Ruby - Ruby Issue Tracking System
• Bug #​22220: Performance regression when requiring aws-sdk-ec2 in Ruby 4.0.6 - Ruby - Ruby Issue Tracking System
• Bug #​22218: Line TracePoint misses executed loop condition after a guard - Ruby - Ruby Issue Tracking System
• Bug #​22198: win32: heap overflow in Kernel#system - Ruby - Ruby Issue Tracking System
• Bug #​22196: Heap-use-after-free in fiber_switch with transfer-terminated async tasks on 3.4.10 - Ruby - Ruby Issue Tracking System
• Bug #​22190: Class#subclasses does not include clones of classes that include modules - Ruby - Ruby Issue Tracking System
• Bug #​11438: native_thread_init_stack() get machine.stack_start unequal to thread's stack start address, x86 win32 - Ruby - Ruby Issue Tracking System
• Bug #​22257: Prepending a module to an already-included module leaves stale super caches - Ruby - Ruby Issue Tracking System
• Bug #​22242: SEGV in method dispatch (vm_call_iseq_setup_kwparm_nokwarg / def_iseq_ptr) on Ruby 4.0.6 — Rails CI - Ruby - Ruby Issue Tracking System
• Bug #​22269: Coverage.line_stub clobbers already-collected coverage data - Ruby - Ruby Issue Tracking System
• Bug #​22290: Adding instance variables to anonymous object may bloat all future classes - Ruby - Ruby Issue Tracking System
• Bug #​22292: YJIT/ZJIT: Struct accessor crashes after an instance variable is set on a Struct that exactly fills the largest GC slot - Ruby - Ruby Issue Tracking System
• Bug #​20958: fix ENV.keys encoding on windows - Ruby - Ruby Issue Tracking System
• Bug #​22259: Arrays sharding a buffer segfault when concatenating with each other - Ruby - Ruby Issue Tracking System
• Bug #​22264: Warning missing from parse.y hash literals - Ruby - Ruby Issue Tracking System
• Bug #​22303: EncodingError from interpolating symbol crashes whole process - Ruby - Ruby Issue Tracking System
• Bug #​22224: YJIT: rb_yjit_invalidate_ep_is_bp takes the VM lock stopping Ractors on every Proc materialization; multi-Ractor throughput collapses (up to ~150x) - Ruby - Ruby Issue Tracking System

Note: This list is automatically generated by tool/gen-github-release.rb. Because of this, some commits may be missing.

Full Changelog

ruby/setup-ruby (ruby/setup-ruby)

v1.322.0

Compare Source

What's Changed

• Add ruby-4.0.7 by @​ruby-builder-bot in #​936

Full Changelog: ruby/setup-ruby@v1.321.0...v1.322.0

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.6.4

Compare Source

Sponsorship is appreciated!

zizmor 1.30.1 is now the default version.

Release notes: https://docs.zizmor.sh/release-notes/#​1301

v0.6.3

Compare Source

zizmor 1.30.0 is now the default version.

Release notes: https://docs.zizmor.sh/release-notes/#​1300

---

Configuration

📅 Schedule: (in timezone Australia/Sydney)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.37%. Comparing base (1f87b5c) to head (ea230c4).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #3084      +/-   ##
==========================================
- Coverage   83.69%   83.37%   -0.33%     
==========================================
  Files         117      117              
  Lines        7157     7157              
==========================================
- Hits         5990     5967      -23     
- Misses       1167     1190      +23     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.