chore(deps): pin dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pinDigest	-> 11bd719
docker/login-action	action	pinDigest	-> 9780b0c
docker/metadata-action	action	pinDigest	-> 369eb59
ghcr.io/cloudfoundry/app-autoscaler-release-tools	container	pinDigest	-> b0b8601
github/codeql-action	action	pinDigest	-> aa57810
jetpackio/devbox	final	pinDigest	-> 7e2e69b
orange-cloudfoundry/bosh-release-action	action	pinDigest	-> a124f0c
reviewdog/action-actionlint	action	pinDigest	-> 053c5cf
reviewdog/action-alex	action	pinDigest	-> 986cf7d
reviewdog/action-markdownlint	action	pinDigest	-> f901468
reviewdog/action-shellcheck	action	pinDigest	-> 22f96e3
ubuntu	final	pinDigest	-> 80dd3c3

---

Configuration

📅 Schedule: Branch creation - "* 0-4,22-23 * * 1-5,* * * * 0,6" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Remaining comments which cannot be posted as a review comment to avoid GitHub Rate Limit

actionlint

---

[actionlint] _{reported by reviewdog 🐶}
shellcheck reported issue in this script: SC2028:info:2:6: echo may not expand escape sequences. Use printf [shellcheck]

app-autoscaler-release/.github/workflows/image.yaml

Line 52 in e82552e

run: |

---

[actionlint] _{reported by reviewdog 🐶}
shellcheck reported issue in this script: SC2028:info:2:6: echo may not expand escape sequences. Use printf [shellcheck]

app-autoscaler-release/.github/workflows/image.yaml

Line 59 in e82552e

run: |

---

[actionlint] _{reported by reviewdog 🐶}
shellcheck reported issue in this script: SC2086:info:2:13: Double quote to prevent globbing and word splitting [shellcheck]

app-autoscaler-release/.github/workflows/linters.yaml

Line 20 in e82552e

run: |

---

[actionlint] _{reported by reviewdog 🐶}
shellcheck reported issue in this script: SC2086:info:1:53: Double quote to prevent globbing and word splitting [shellcheck]

app-autoscaler-release/.github/workflows/tidy-go-mod.yaml

Line 33 in e82552e

run: echo "changed=$(git status --porcelain | wc -l)" >> $GITHUB_OUTPUT

---

[actionlint] _{reported by reviewdog 🐶}
shellcheck reported issue in this script: SC2155:warning:12:15: Declare and assign separately to avoid masking return values [shellcheck]

app-autoscaler-release/.github/workflows/update-all-golang-dependencies.yaml

Line 26 in e82552e

run: |

[github-actions]

Remaining comments which cannot be posted as a review comment to avoid GitHub Rate Limit

actionlint

---

[actionlint] _{reported by reviewdog 🐶}
"github.head_ref" is potentially untrusted. avoid using it directly in inline scripts. instead, pass it through an environment variable. see https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions for more details [expression]

app-autoscaler-release/.github/workflows/dependency-updates-post-processing.yaml

Line 62 in 0515a50

run: |

[sonarcloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud