chore(deps): update github-actions dependencies - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/upload-artifact	action	digest	b4b15b8 -> 65c4c4a
docker/setup-buildx-action	action	digest	c47758b -> 6524bf6
reviewdog/action-yamllint	action	minor	v1.19.0 -> v1.20.0

---

Release Notes

reviewdog/action-yamllint (reviewdog/action-yamllint)

v1.20.0

Compare Source

What's Changed

• Add fail_level and deduplicate fail_on_error by @​massongit in https://github.com/reviewdog/action-yamllint/pull/45

New Contributors

• @​massongit made their first contribution in https://github.com/reviewdog/action-yamllint/pull/45

Full Changelog: reviewdog/action-yamllint@v1.19.0...v1.20.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[village-labs-bot]

upbound/configuration-app #68

Change Summary:

• Updated the yamllint GitHub Action from version 1.19.0 to 1.20.0 in the CI/CD workflow
• Updated the commit hash for the yamllint action from e09f07780388032a624e9eb44a23fd1bbb4052cc to 1dca3ad811867be18fbe293a9818d715a6c2cd46

Potential Vulnerability:

• File: .github/workflows/yamllint.yaml:10
• Code: uses: reviewdog/action-yamllint@1dca3ad811867be18fbe293a9818d715a6c2cd46 # v1.20.0
• Explanation: While this change appears to be a version bump, using specific commit hashes in GitHub Actions can be both good and bad. It's good for immutability, but if the repository is compromised and the commit is altered, it could lead to execution of malicious code. Consider using SHA-256 commit hashes for additional security.

Code Smell:

• No code smells identified in this change. The modification is straightforward and follows GitHub Actions best practices.

Debug Log:

• No debug logs found in the changes.

Unintended Consequences:

• File: .github/workflows/yamllint.yaml:10
• Code: uses: reviewdog/action-yamllint@1dca3ad811867be18fbe293a9818d715a6c2cd46 # v1.20.0
• Explanation: Version updates in CI/CD tools can sometimes introduce breaking changes or new behavior. It would be beneficial to review the changelog for version 1.20.0 of the yamllint action to ensure there are no breaking changes that could affect the current workflow.

Risk Score: 2
The risk is relatively low as this is a minor version upgrade of a widely used GitHub Action. The change is isolated to the CI/CD pipeline and doesn't affect production code directly. The main considerations are around the security of the commit hash reference and potential behavioral changes in the new version.