build(deps): bump grafana/xk6/.github/workflows/tooling-validate.yml from 1.2.4 to 1.3.1

[dependabot]

Bumps grafana/xk6/.github/workflows/tooling-validate.yml from 1.2.4 to 1.3.1.

Release notes

Sourced from grafana/xk6/.github/workflows/tooling-validate.yml's releases.

v1.3.1

Grafana xk6 v1.3.1 is here! 🎉

This release enhances the extension validation workflow with k6-based integration testing capabilities.

New Features

Integration Testing in Extension Validation

The extension-validate reusable workflow now supports running k6-based integration tests for extensions (#395). Extension developers can specify test scripts using the new xk6-test-pattern input parameter, and the workflow will automatically execute them using the xk6 test command.

Usage:

uses: grafana/xk6/.github/workflows/extension-validate.yml@v1.3.1
with:
  xk6-test-pattern: "test/**/*.js"

Features:

• Runs integration tests using the newly built xk6 binary
• Supports glob patterns for test file selection
• Generates TAP format test reports in GitHub Actions step summary
• Optional and backward compatible - only runs when xk6-test-pattern is provided

Dependency Updates

Various dependencies have been updated based on Renovate pull requests.

v1.3.0

Grafana xk6 v1.3.0 is here! 🎉

This release introduces the xk6 test command for running integration tests during extension development, making it easier to validate k6 extensions with comprehensive test reporting.

New Features

Integration Testing: xk6 test

New command for running k6 integration tests during extension development (#382). This command builds k6 with your extension once and runs multiple test scripts, reporting results in TAP (Test Anything Protocol) format by default or CTRF JSON (Common Test Report Format) with the --json flag.

# Run tests with TAP output
xk6 test tests/**/*.js
Generate CTRF JSON report
xk6 test --json --out report.json tests/**/*.js

Supports:

... (truncated)

Commits

• 4102eee Add release notes for v1.3.1 (#397)
• 8544df1 chore(deps): update actions/checkout digest to 8e8c483 (#389)
• f038009 chore(deps): update workflow tooling (#393)
• e2c5a64 fix(deps): update module github.com/spf13/cobra to v1.10.2 (#392)
• 62c5a18 chore(deps): update golangci/golangci-lint-action action to v9.2.0 (#391)
• 5e998ac Add integration test step to extension-validate workflow (#395)
• c3d880b chore(deps): update softprops/action-gh-release action to v2.5.0 (#390)
• 1dbaf89 Update Docker base images to golang 1.25.5 (#388)
• 745992d Add v1.3.0 release notes (#386)
• f5ab2e9 Add xk6 test command for running integration tests during extension developme...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #293.