build(deps): bump grafana/xk6/.github/workflows/tooling-validate.yml from 1.2.4 to 1.3.2

[dependabot]

Bumps grafana/xk6/.github/workflows/tooling-validate.yml from 1.2.4 to 1.3.2.

Release notes

Sourced from grafana/xk6/.github/workflows/tooling-validate.yml's releases.

v1.3.2

Grafana xk6 v1.3.2 is here! 🎉

This is a patch release that addresses security vulnerabilities in dependencies.

Security

• #400
  • Update Docker base image to gosec 2.22.11
  • Set go version to v1.25.5 in release workflow

v1.3.1

Grafana xk6 v1.3.1 is here! 🎉

This release enhances the extension validation workflow with k6-based integration testing capabilities.

New Features

Integration Testing in Extension Validation

The extension-validate reusable workflow now supports running k6-based integration tests for extensions (#395). Extension developers can specify test scripts using the new xk6-test-pattern input parameter, and the workflow will automatically execute them using the xk6 test command.

Usage:

uses: grafana/xk6/.github/workflows/extension-validate.yml@v1.3.1
with:
  xk6-test-pattern: "test/**/*.js"

Features:

• Runs integration tests using the newly built xk6 binary
• Supports glob patterns for test file selection
• Generates TAP format test reports in GitHub Actions step summary
• Optional and backward compatible - only runs when xk6-test-pattern is provided

Dependency Updates

Various dependencies have been updated based on Renovate pull requests.

v1.3.0

Grafana xk6 v1.3.0 is here! 🎉

This release introduces the xk6 test command for running integration tests during extension development, making it easier to validate k6 extensions with comprehensive test reporting.

New Features

Integration Testing: xk6 test

... (truncated)

Commits

• da8eccb Fix CVEs in dependencies (#401)
• ac57dc3 docs: update sync command help text to clarify k6 version usage (#399)
• 4102eee Add release notes for v1.3.1 (#397)
• 8544df1 chore(deps): update actions/checkout digest to 8e8c483 (#389)
• f038009 chore(deps): update workflow tooling (#393)
• e2c5a64 fix(deps): update module github.com/spf13/cobra to v1.10.2 (#392)
• 62c5a18 chore(deps): update golangci/golangci-lint-action action to v9.2.0 (#391)
• 5e998ac Add integration test step to extension-validate workflow (#395)
• c3d880b chore(deps): update softprops/action-gh-release action to v2.5.0 (#390)
• 1dbaf89 Update Docker base images to golang 1.25.5 (#388)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[szkiba]

migrating to renovate

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.