Update patch dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v3.30.7 -> v3.30.8
rhysd/actionlint	repository	patch	v1.7.7 -> v1.7.8

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

github/codeql-action (github/codeql-action)

v3.30.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

rhysd/actionlint (rhysd/actionlint)

v1.7.8

Compare Source

• Support models permission in permissions section. (#​531, thanks @​muzimuzhi)
• Support job.check_run_id property. (#​576, thanks @​muzimuzhi for fixing the type at #​577)
• Support node24 runtime at using section in action metadata. (#​561, thanks @​salmanmkc)
• Add support for the following runner labels
  • macos-26 and macos-26-large (#​572, thanks @​muzimuzhi)
  • macos-15 (#​572, thanks @​muzimuzhi)
• Drop support for the following runner labels.
  • ubuntu-20.04 (#​534, thanks @​shogo82148)
  • windows-2019 (#​572, thanks @​muzimuzhi)
• Support deprecationMessage in action inputs. (#​540, thanks @​saansh45)
• Support windows-11-arm runner. (#​542, thanks @​trim21)
• Handle ubuntu-latest runner label as ubuntu-24.04 and macos-latest runner label as macos-15.
• Report mixing Intel Mac labels and Arm Mac labels as error.
• Add new types to issues and pull_request_target webhooks.
• Update the popular actions data set to the latest and add more actions to it (thanks @​sethvargo for fixing the go generate scripts)
  • actions/create-github-app-token
  • actions/attest-sbom
  • actions/ai-inference
  • peter-evans/create-or-update-comment
  • release-drafter/release-drafter
  • SamKirkland/FTP-Deploy-Action
• Fix the version value in actionlint -version can be empty.
• Fix outdated URL links in some error messages and documents.
• Homebrew formula in this repository is deprecated and Homebrew cask is newly added instead because GoReleaser no longer supports Homebrew formula update. Note that Homebrew's official actionlint formula is still maintained. Please read the documentation for more details.
• Drop support for Go 1.23 and earlier because they are no longer maintained officially. Go 1.24 and later are supported to build actionlint.
• Replace go-yaml/yaml@v3 package with yaml/go-yaml@v4 package. go-yaml/yaml was used for parsing workflow files however it was unmaintained. yaml/go-yaml is a successor of the library officially maintained by YAML organization. (#​575)
• Improve error messages on parsing workflow and action metadata files.

[Changes][v1.7.8]

---

Configuration

📅 Schedule: Branch creation - "after 5pm every weekday,before 8am every weekday,every weekend" in timezone America/Chicago, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.