chore(deps): update all non-major github action dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v2 -> v2.7.0
actions/checkout	action	minor	v3 -> v3.6.0
actions/checkout	action	minor	v4 -> v4.2.2
actions/dependency-review-action	action	patch	v1 -> v1.0.2
actions/setup-go	action	minor	v4 -> v4.1.0

Review

• Updates have been tested and work
• If updates are AWS related, versions match the infrastructure (e.g. Lambda runtime, database, etc.)

---

Release Notes

actions/checkout (actions/checkout)

v2.7.0

Compare Source

What's Changed

• Add new public key for known_hosts (#​1237) by @​TingluoHuang in https://github.com/actions/checkout/pull/1238

Full Changelog: actions/checkout@v2.6.0...v2.7.0

v2.6.0

Compare Source

What's Changed

• Add backports to v2 branch by @​cory-miller in https://github.com/actions/checkout/pull/1040
  • Includes backports from the following changes: https://github.com/actions/checkout/pull/964, https://github.com/actions/checkout/pull/1002, https://github.com/actions/checkout/pull/1029
  • Upgraded the licensed version to match what is used in v3.

Full Changelog: actions/checkout@v2.5.0...v2.6.0

v2.5.0

Compare Source

What's Changed

• Update @​actions/core to 1.10.0 by @​rentziass in https://github.com/actions/checkout/pull/962

Full Changelog: actions/checkout@v2...v2.5.0

v2.4.2

Compare Source

What's Changed

• Add set-safe-directory input to allow customers to take control. (#​770) by @​TingluoHuang in https://github.com/actions/checkout/pull/776
• Prepare changelog for v2.4.2. by @​TingluoHuang in https://github.com/actions/checkout/pull/778

Full Changelog: actions/checkout@v2...v2.4.2

v2.4.1

Compare Source

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory

v2.4.0

Compare Source

• Convert SSH URLs like org-<ORG_ID>@&#8203;github.com: to https://github.com/ - pr

v2.3.5

Compare Source

Update dependencies

v2.3.4

Compare Source

• Add missing awaits
• Swap to Environment Files

v2.3.3

Compare Source

• Remove Unneeded commit information from build logs
• Add Licensed to verify third party dependencies

v2.3.2

Compare Source

Add Third Party License Information to Dist Files

v2.3.1

Compare Source

• Fix default branch resolution for .wiki and when using SSH

v2.3.0

Compare Source

• Fallback to the default branch

v2.2.0

Compare Source

• Fetch all history for all tags and branches when fetch-depth=0

v2.1.1

Compare Source

• Changes to support GHES (here and here)

v2.1.0

Compare Source

• Group output
• Changes to support GHES alpha release
• Persist core.sshCommand for submodules
• Add support ssh
• Convert submodule SSH URL to HTTPS, when not using SSH
• Add submodule support
• Follow proxy settings
• Fix ref for pr closed event when a pr is merged
• Fix issue checking detached when git less than 2.22

actions/dependency-review-action (actions/dependency-review-action)

v1.0.2: 1.0.2

Compare Source

• Clarify error messages for private repos
• Update NPM dependencies.

v1.0.1

Compare Source

We're starting to use semantic versioning for our project.

actions/setup-go (actions/setup-go)

v4.1.0

Compare Source

What's Changed

In scope of this release, slow installation on Windows was fixed by @​dsame in https://github.com/actions/setup-go/pull/393 and OS version was added to primaryKey for Ubuntu runners to avoid conflicts (https://github.com/actions/setup-go/pull/383)

This release also includes the following changes:

• Remove implicit dependencies by @​nikolai-laevskii in https://github.com/actions/setup-go/pull/378
• Update action.yml by @​mkelly in https://github.com/actions/setup-go/pull/379
• Added a description that go-version should be specified as a string type by @​n3xem in https://github.com/actions/setup-go/pull/367
• Add note about YAML parsing versions by @​dmitry-shibanov in https://github.com/actions/setup-go/pull/382
• Automatic update of configuration files from 05/23/2023 by @​github-actions in https://github.com/actions/setup-go/pull/377
• Bump tough-cookie and @​azure/ms-rest-js by @​dependabot in https://github.com/actions/setup-go/pull/392
• Bump word-wrap from 1.2.3 to 1.2.4 by @​dependabot in https://github.com/actions/setup-go/pull/397
• Bump semver from 6.3.0 to 6.3.1 by @​dependabot in https://github.com/actions/setup-go/pull/396

New Contributors

• @​mkelly made their first contribution in https://github.com/actions/setup-go/pull/379
• @​n3xem made their first contribution in https://github.com/actions/setup-go/pull/367

Full Changelog: actions/setup-go@v4...v4.1.0

v4.0.1

Compare Source

What's Changed

• Update documentation for v4 by @​dsame in https://github.com/actions/setup-go/pull/354
• Fix glob bug in the package.json scripts section by @​IvanZosimov in https://github.com/actions/setup-go/pull/359
• Bump xml2js dependency by @​dmitry-shibanov in https://github.com/actions/setup-go/pull/370
• Bump @actions/cache dependency to v3.2.1 by @​nikolai-laevskii in https://github.com/actions/setup-go/pull/374

New Contributors

• @​nikolai-laevskii made their first contribution in https://github.com/actions/setup-go/pull/374

Full Changelog: actions/setup-go@v4...v4.0.1

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Montreal, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.