chore(deps): update dependency rhysd/actionlint to v1.7.9

[renovate]

This PR contains the following updates:

Package	Update	Change
rhysd/actionlint	patch	1.7.7 -> 1.7.9

---

Release Notes

rhysd/actionlint (rhysd/actionlint)

v1.7.9

Compare Source

• Add support for ubuntu-slim runner label. (#​585, thanks @​cestorer)
• Check input deprecation in action by checking deprecationMessage property. Using a deprecated input is reported as error if it is not marked as required. See the document for more details. (#​580)

  - uses: reviewdog/action-actionlint@v1
    with:
      # ERROR: Using a deprecated input
      fail_on_error: true

• Add support for the Custom images feature.
  • Support image_version workflow trigger.

    on:
      image_version:
        names:
          - "MyNewImage"
          - "MyOtherImage"
        versions:
          - 1.*
          - 2.*

  • Support jobs.<job_id>.snapshot syntax. To make actionlint recognize your own image generation runner, use self-hosted-runner.labels config.

    jobs:
      build:
        runs-on: my-image-generation-runner
        snapshot:
            image-name: my-custom-image
            version: 2.*

• Fix some invalid permissions are not reported as error in id-token and models scopes. (#​582, thanks @​holtkampjs)
• Fix args and entrypoint inputs are not recognized at uses: when it's not a Docker action. (#​550)
• Set correct column in source position of YAML parse error.
• Fix credentials cannot be configured with ${{ }}. (#​590)
• Improve messages in syntax errors on parsing steps (run: and uses:). Available keys suggestion is now more accurate and unexpected keys are detected more accurately.
• Fix the order of errors can be non-deterministic when multiple errors are caused at the same source positions.
• Improve error messages showing suggestions on detecting invalid permissions.
• Add instruction for installing actionlint with mise package manager. (#​589, thanks @​jylenhof)
• Fix outdated URLs in the document.
• Add new actionlint.AllContexts map constant in Go API that contains the information about all context availability.
• Update popular actions data set to the latest with several major versions of actions and the following new actions.
  • anthropics/claude-code-action
  • openai/codex-action
  • google-github-actions/run-gemini-cli
• Add make cov task to easily generate a code coverage report.
• Make installing the formula version of actionlint pacakge from tap of this repository with Homebrew a hard error. Install the cask version instead following the instruction in the error message.

[Changes][v1.7.9]

v1.7.8

Compare Source

• Support models permission in permissions section. (#​531, thanks @​muzimuzhi)
• Support job.check_run_id property. (#​576, thanks @​muzimuzhi for fixing the type at #​577)
• Support node24 runtime at using section in action metadata. (#​561, thanks @​salmanmkc)
• Add support for the following runner labels
  • macos-26 and macos-26-large (#​572, thanks @​muzimuzhi)
  • macos-15 (#​572, thanks @​muzimuzhi)
• Drop support for the following runner labels.
  • ubuntu-20.04 (#​534, thanks @​shogo82148)
  • windows-2019 (#​572, thanks @​muzimuzhi)
• Support deprecationMessage in action inputs. (#​540, thanks @​saansh45)
• Support windows-11-arm runner. (#​542, thanks @​trim21)
• Handle ubuntu-latest runner label as ubuntu-24.04 and macos-latest runner label as macos-15.
• Report mixing Intel Mac labels and Arm Mac labels as error.
• Add new types to issues and pull_request_target webhooks.
• Update the popular actions data set to the latest and add more actions to it (thanks @​sethvargo for fixing the go generate scripts)
  • actions/create-github-app-token
  • actions/attest-sbom
  • actions/ai-inference
  • peter-evans/create-or-update-comment
  • release-drafter/release-drafter
  • SamKirkland/FTP-Deploy-Action
• Fix the version value in actionlint -version can be empty.
• Fix outdated URL links in some error messages and documents.
• Homebrew formula in this repository is deprecated and Homebrew cask is newly added instead because GoReleaser no longer supports Homebrew formula update. Note that Homebrew's official actionlint formula is still maintained. Please read the documentation for more details.
• Drop support for Go 1.23 and earlier because they are no longer maintained officially. Go 1.24 and later are supported to build actionlint.
• Replace go-yaml/yaml@v3 package with yaml/go-yaml@v4 package. go-yaml/yaml was used for parsing workflow files however it was unmaintained. yaml/go-yaml is a successor of the library officially maintained by YAML organization. (#​575)
• Improve error messages on parsing workflow and action metadata files.

[Changes][v1.7.8]

---

Configuration

📅 Schedule: Branch creation - "before 5am every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.