Fix CI: migrate biome.json to v2 schema, pin @actions/core to v1

Two regressions came in via Dependabot bumps on trunk:

- @biomejs/biome 1.x → 2.x renamed config keys (`files.ignore` →
  `files.includes` with negation patterns, `overrides[*].include` →
  `overrides[*].includes`, top-level `organizeImports` moved into
  `assist.actions.source.organizeImports`). Update biome.json to the v2
  schema and reorder a stale import that the v2 organizer flagged.

- @actions/core 1.x → 3.x is ESM-only and broke the CJS TypeScript build
  (TS1479). Pin it back to ^1.11.1 and ignore future major bumps in
  Dependabot until we migrate the project to ESM.

Author: lukekim

.github/dependabot.yml

@@ -5,6 +5,11 @@ updates:
     schedule:
       interval: weekly
     open-pull-requests-limit: 10
+    ignore:
+      # Pin to v1.x — v2+ is ESM-only and breaks the current CJS bundle. Track
+      # the ESM migration before lifting this.
+      - dependency-name: "@actions/core"
+        update-types: ["version-update:semver-major"]
     groups:
       production:
         dependency-type: production

biome.json

@@ -1,7 +1,7 @@
 {
-  "$schema": "https://biomejs.dev/schemas/1.9.4/schema.json",
+  "$schema": "https://biomejs.dev/schemas/2.4.14/schema.json",
   "files": {
-    "ignore": ["dist", "lib", "node_modules", "coverage"]
+    "includes": ["**", "!dist", "!lib", "!node_modules", "!coverage"]
   },
   "formatter": {
     "enabled": true,
@@ -24,7 +24,7 @@
   },
   "overrides": [
     {
-      "include": ["__tests__/**"],
+      "includes": ["__tests__/**"],
       "linter": {
         "rules": {
           "style": {
@@ -41,5 +41,11 @@
       "trailingCommas": "all"
     }
   },
-  "organizeImports": { "enabled": true }
+  "assist": {
+    "actions": {
+      "source": {
+        "organizeImports": "on"
+      }
+    }
+  }
 }

dist/index.js

@@ -23,7 +23,7 @@
     "all": "npm run lint && npm run typecheck && npm run test && npm run build"
   },
   "dependencies": {
-    "@actions/core": "^3.0.1",
+    "@actions/core": "^1.11.1",
     "@spiceai/spice": "^3.1.0"
   },
   "overrides": {

dist/index.js.map

@@ -4,8 +4,8 @@ import { DeploymentFailedError, DeploymentTimeoutError, InputValidationError } f
 import type { ActionInputs } from "./inputs.js";
 import { deriveRuntimeUrl, deriveRuntimeUrlFromCname } from "./inputs.js";
 import { buildProbePlans } from "./probes.js";
-import { RuntimeClient } from "./runtime.js";
 import type { ProbeResult } from "./runtime.js";
+import { RuntimeClient } from "./runtime.js";
 import { parseSecrets } from "./secrets.js";
 import { readSpicepod } from "./spicepod.js";
 import { parseTags } from "./tags.js";