ci(deps): bump the github-actions group with 3 updates

.github/CODEOWNERS

@@ -0,0 +1,29 @@
+# Code owners for CG-Bundler repository
+# This file defines who should be automatically requested for review
+# when changes are made to specific files or directories.
+#
+# More information: https://docs.github.com/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners
+
+# Global code owner - applies to all files unless overridden
+* @MathieuSoysal
+
+# Rust source code
+/src/ @MathieuSoysal
+/Cargo.toml @MathieuSoysal
+/Cargo.lock @MathieuSoysal
+
+# Configuration files
+/.github/ @MathieuSoysal
+/deny.toml @MathieuSoysal
+/sonar-project.properties @MathieuSoysal
+
+# Documentation
+/README.md @MathieuSoysal
+/CHANGELOG.md @MathieuSoysal
+/CONTRIBUTING.md @MathieuSoysal
+
+# Examples
+/examples/ @MathieuSoysal
+
+# Tests
+/tests/ @MathieuSoysal

.github/dependabot.yml

@@ -13,8 +13,6 @@ updates:
       time: "09:00"
       timezone: "UTC"
     open-pull-requests-limit: 10
-    reviewers:
-      - "MathieuSoysal"
     assignees:
       - "MathieuSoysal"
     labels:
@@ -47,8 +45,6 @@ updates:
       time: "09:00"
       timezone: "UTC"
     open-pull-requests-limit: 5
-    reviewers:
-      - "MathieuSoysal"
     assignees:
       - "MathieuSoysal"
     labels:

.github/workflows/ci.yml

@@ -169,7 +169,7 @@ jobs:
         run: cargo llvm-cov --all-features --workspace --lcov --output-path lcov.info
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
         with:
           file: lcov.info
           fail_ci_if_error: false
@@ -180,12 +180,14 @@ jobs:
           name: coverage-report
           path: lcov.info
 
-  sonarqube:
-    name: SonarQube
+  sonarcloud:
+    name: SonarCloud
     runs-on: ubuntu-latest
     needs: [test, code-coverage]
     permissions:
       contents: read
+      pull-requests: write
+      checks: write
     steps:
       - uses: actions/checkout@v4
         with:
@@ -204,4 +206,4 @@ jobs:
       - name: SonarQube Scan
         uses: SonarSource/sonarqube-scan-action@v5
         env:
-          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/dependency-update.yml

@@ -48,7 +48,7 @@ jobs:
 
       - name: Create Pull Request
         if: env.HAS_UPDATES == 'true'
-        uses: peter-evans/create-pull-request@v5
+        uses: peter-evans/create-pull-request@v7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commit-message: "chore: update dependencies"

.github/workflows/release.yml

@@ -123,7 +123,7 @@ jobs:
           copy target\${{ matrix.target }}\release\cg-bundler.exe ${{ matrix.name }}
 
       - name: Upload Release Asset
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v2
         with:
           tag_name: ${{ github.ref_name }}
           files: ./${{ matrix.name }}