chore(deps): update workflows

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Pending
github/codeql-action	action	patch	v4.35.2 → v4.35.4	v4.35.5
goreleaser/goreleaser-action	action	minor	v7.1.0 → v7.2.1
ruby (source)	uses-with	patch	4.0.2 → 4.0.3	4.0.4
ruby/setup-ruby	action	minor	v1.302.0 → v1.306.0	v1.308.0 (+1)

---

Release Notes

github/codeql-action (github/codeql-action)

v4.35.4

Compare Source

• Update default CodeQL bundle version to 2.25.4. #​3881

v4.35.3

Compare Source

• Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. #​3837
• Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. #​3850
• Best-effort connection tests for private registries now use GET requests instead of HEAD for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. #​3853
• Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. #​3852
• Update default CodeQL bundle version to 2.25.3. #​3865

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v7.2.1

Compare Source

This fully removes the usage of the old nightly moving tag.

Full Changelog: goreleaser/goreleaser-action@v7.2.0...v7.2.1

v7.2.0

Compare Source

What's Changed

• test: cover install across release eras by @​caarlos0 in #​555
• feat: add version-file input by @​caarlos0 in #​556
• feat: resolve nightly to latest vX.Y.Z--nightly release by @​caarlos0 in #​558

Full Changelog: goreleaser/goreleaser-action@v7...v7.2.0

ruby/ruby (ruby)

v4.0.3: 4.0.3

Compare Source

What's Changed

• Prohibit def_method on marshal-loaded ERB instances (CVE-2026-41316)

Full Changelog

ruby/setup-ruby (ruby/setup-ruby)

v1.306.0

Compare Source

What's Changed

• Add truffleruby-34.0.1,truffleruby+graalvm-34.0.1 by @​ruby-builder-bot in #​909

Full Changelog: ruby/setup-ruby@v1.305.0...v1.306.0

v1.305.0

Compare Source

What's Changed

• Update CRuby releases on Windows by @​ruby-builder-bot in #​908

Full Changelog: ruby/setup-ruby@v1.304.0...v1.305.0

v1.304.0

Compare Source

What's Changed

• Add jruby-10.1.0.0 by @​ruby-builder-bot in #​906

Full Changelog: ruby/setup-ruby@v1.303.0...v1.304.0

v1.303.0

Compare Source

What's Changed

• Add ruby-4.0.3 by @​ruby-builder-bot in #​903

Full Changelog: ruby/setup-ruby@v1.302.0...v1.303.0

---

Configuration

📅 Schedule: (in timezone Australia/Sydney)

• Branch creation
  • "before 6am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.11%. Comparing base (6426550) to head (a3db946).

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #2764      +/-   ##
==========================================
- Coverage   79.16%   79.11%   -0.05%     
==========================================
  Files         120      120              
  Lines        8154     8154              
==========================================
- Hits         6455     6451       -4     
- Misses       1320     1322       +2     
- Partials      379      381       +2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.