chore(deps): update github actions (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
SonarSource/sonarqube-scan-action	action	major	v7.2.1 → v8.2.0
actions/cache	action	major	v5 → v6
actions/checkout	action	major	v6 → v7
docker/setup-buildx-action	action	major	v3 → v4
strumwolf/delete-deployment-environment	action	major	v3 → v4

---

Release Notes

SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)

v8.2.0

Compare Source

What's Changed

• SQSCANGHA-149 Add scannerBinariesAuthHeader input by @​henryju in #​246
• SQSCANGHA-88 Deprecate the SONARCLOUD_URL env variable support by @​henryju in #​249
• SQSCANGHA-84 Remove outdated wget/curl references by @​henryju in #​248
• SQSCANGHA-135 Fix scanner binaries always re-downloaded due to incompatible 4-part version by @​henryju in #​250
• SQSCANGHA-127 Rename downloaded file to .zip before extraction on Windows by @​henryju in #​251

Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.2.0

v8.2

Compare Source

v8.1.0

Compare Source

What's Changed

• SQSCANGHA-146 Add proxy support for GPG keyserver access by @​henryju in #​244
• SQSCANGHA-148 Update SonarScanner CLI to 8.1.0.6389 by @​github-actions[bot] in #​232

Full Changelog: SonarSource/sonarqube-scan-action@v8...v8.1.0

v8.1

Compare Source

v8.0.0

Compare Source

What's Changed

Breaking change

• SQSCANGHA-145 Set skipSignatureVerification default value to false by @​antoine-vinot-sonarsource in #​241

Full Changelog: SonarSource/sonarqube-scan-action@v7...v8.0.0

v8.0

Compare Source

v8

Compare Source

actions/cache (actions/cache)

v6.1.0

Compare Source

What's Changed

• Bump @​actions/cache to v6.1.0 - handle read-only cache access by @​jasongin in #​1768

Full Changelog: actions/cache@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

• Update packages, migrate to ESM by @​Samirat in #​1760

Full Changelog: actions/cache@v5...v6.0.0

v6

Compare Source

actions/checkout (actions/checkout)

v7.0.0

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

v7

Compare Source

• Block checking out fork PR for pull_request_target and workflow_run by @​aiqiaoy in #​2454
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @​dependabot[bot] in #​2458
• Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​2460
• Bump js-yaml from 4.1.0 to 4.2.0 by @​dependabot[bot] in #​2461
• Bump @​actions/core and @​actions/tool-cache and Remove uuid by @​dependabot[bot] in #​2459
• upgrade module to esm and update dependencies by @​aiqiaoy in #​2463
• Bump the minor-npm-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​2462

docker/setup-buildx-action (docker/setup-buildx-action)

v4.2.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​572
• Bump @​actions/core from 3.0.0 to 3.0.1 in #​551
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​557 #​580
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​573
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​576
• Bump js-yaml from 4.1.1 to 5.2.0 in #​562
• Bump sigstore from 4.1.0 to 4.1.1 in #​577
• Bump tmp from 0.2.5 to 0.2.7 in #​556
• Bump undici from 6.25.0 to 6.27.0 in #​570
• Bump vite from 7.3.2 to 7.3.6 in #​569

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

v4.1.0

Compare Source

• Bump @​docker/actions-toolkit from 0.79.0 to 0.90.0 in #​489
• Bump brace-expansion from 1.1.12 to 5.0.6 in #​547 #​508
• Bump fast-xml-builder from 1.0.0 to 1.2.0 in #​540
• Bump fast-xml-parser from 5.4.2 to 5.8.0 in #​496
• Bump flatted from 3.3.3 to 3.4.2 in #​499
• Bump glob from 10.3.12 to 13.0.6 in #​495
• Bump handlebars from 4.7.8 to 4.7.9 in #​504
• Bump lodash from 4.17.23 to 4.18.1 in #​523
• Bump picomatch from 4.0.3 to 4.0.4 in #​503
• Bump postcss from 8.5.6 to 8.5.10 in #​537
• Bump tar from 6.2.1 to 7.5.15 in #​545
• Bump undici from 6.23.0 to 6.25.0 in #​492
• Bump vite from 7.3.1 to 7.3.2 in #​520

Full Changelog: docker/setup-buildx-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in #​483
• Remove deprecated inputs/outputs by @​crazy-max in #​464
• Switch to ESM and update config/test wiring by @​crazy-max in #​481
• Bump @​actions/core from 1.11.1 to 3.0.0 in #​475
• Bump @​docker/actions-toolkit from 0.63.0 to 0.79.0 in #​482 #​485
• Bump js-yaml from 4.1.0 to 4.1.1 in #​452
• Bump lodash from 4.17.21 to 4.17.23 in #​472
• Bump minimatch from 3.1.2 to 3.1.5 in #​480

Full Changelog: docker/setup-buildx-action@v3.12.0...v4.0.0

v4

Compare Source

strumwolf/delete-deployment-environment (strumwolf/delete-deployment-environment)

v4.0.0

Compare Source

What's Changed

• fine-grain App permissions & use GitHub native action for generating tokens by @​Ebonsignori in #​46
• Update README.md - clarify required permissions for environment cleanup and deployments by @​KristofaJosh in #​47
• feat: update dependencies to node 24 and remove unused code by @​maks-oleksyuk in #​49

New Contributors

• @​Ebonsignori made their first contribution in #​46
• @​KristofaJosh made their first contribution in #​47

Full Changelog: strumwolf/delete-deployment-environment@v3...v4.0.0

v4

Compare Source

---

Configuration

📅 Schedule: (in timezone America/Vancouver)

• Branch creation
  • Only on Tuesday (* * * * 2)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Coverage Report (Application)

Totals
Statements:	94.76% ( 4575 / 4828 )
Methods:	96.49% ( 770 / 798 )
Lines:	97.49% ( 2762 / 2833 )
Branches:	87.13% ( 1043 / 1197 )

[github-actions]

Coverage Report (Frontend)

Totals
Statements:	53.92% ( 6689 / 12406 )
Methods:	44.77% ( 998 / 2229 )
Lines:	62.82% ( 4088 / 6507 )
Branches:	43.68% ( 1603 / 3670 )

[sonarqubecloud]

Quality Gate passed for 'nr-permitconnect-navigator-service app'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed for 'nr-permitconnect-navigator-service frontend'

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud