ci(deps): update github-actions to v6 (major)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/labeler	action	major	v5.0.0 -> v6.0.1
actions/upload-artifact	action	major	v5.0.0 -> v6.0.0

---

Release Notes

actions/labeler (actions/labeler)

v6.0.1

Compare Source

What's Changed

• Upgrade publish-action from 0.2.2 to 0.4.0 by @​aparnajyothi-y in #​901

New Contributors

• @​aparnajyothi-y made their first contribution in #​901

Full Changelog: actions/labeler@v6.0.0...v6.0.1

v6.0.0

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​jcambass in #​802

Breaking Changes

• Upgrade Node.js version to 24 in action and dependencies @​salmanmkc in #​891
  Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. Release Notes

Dependency Upgrades

• Upgrade eslint-config-prettier from 9.0.0 to 9.1.0 by @​dependabot[bot] in #​711
• Upgrade eslint from 8.52.0 to 8.55.0 by @​dependabot[bot] in #​720
• Upgrade @​types/jest from 29.5.6 to 29.5.11 by @​dependabot[bot] in #​719
• Upgrade @​types/js-yaml from 4.0.8 to 4.0.9 by @​dependabot[bot] in #​718
• Upgrade @​typescript-eslint/parser from 6.9.0 to 6.14.0 by @​dependabot[bot] in #​717
• Upgrade prettier from 3.0.3 to 3.1.1 by @​dependabot[bot] in #​726
• Upgrade eslint from 8.55.0 to 8.56.0 by @​dependabot[bot] in #​725
• Upgrade @​typescript-eslint/parser from 6.14.0 to 6.19.0 by @​dependabot[bot] in #​745
• Upgrade eslint-plugin-jest from 27.4.3 to 27.6.3 by @​dependabot[bot] in #​744
• Upgrade @​typescript-eslint/eslint-plugin from 6.9.0 to 6.20.0 by @​dependabot[bot] in #​750
• Upgrade prettier from 3.1.1 to 3.2.5 by @​dependabot[bot] in #​752
• Upgrade undici from 5.26.5 to 5.28.3 by @​dependabot[bot] in #​757
• Upgrade braces from 3.0.2 to 3.0.3 by @​dependabot[bot] in #​789
• Upgrade minimatch from 9.0.3 to 10.0.1 by @​dependabot[bot] in #​805
• Upgrade @​actions/core from 1.10.1 to 1.11.1 by @​dependabot[bot] in #​811
• Upgrade typescript from 5.4.3 to 5.7.2 by @​dependabot[bot] in #​819
• Upgrade @​typescript-eslint/parser from 7.3.1 to 8.17.0 by @​dependabot[bot] in #​824
• Upgrade prettier from 3.2.5 to 3.4.2 by @​dependabot[bot] in #​825
• Upgrade @​types/jest from 29.5.12 to 29.5.14 by @​dependabot[bot] in #​827
• Upgrade eslint-plugin-jest from 27.9.0 to 28.9.0 by @​dependabot[bot] in #​832
• Upgrade ts-jest from 29.1.2 to 29.2.5 by @​dependabot[bot] in #​831
• Upgrade @​vercel/ncc from 0.38.1 to 0.38.3 by @​dependabot[bot] in #​830
• Upgrade typescript from 5.7.2 to 5.7.3 by @​dependabot[bot] in #​835
• Upgrade eslint-plugin-jest from 28.9.0 to 28.11.0 by @​dependabot[bot] in #​839
• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot[bot] in #​842
• Upgrade @​octokit/request-error from 5.0.1 to 5.1.1 by @​dependabot[bot] in #​846

Documentation changes

• Add note regarding pull_request_target to README.md by @​silverwind in #​669
• Update readme with additional examples and important note about pull_request_target event by @​IvanZosimov in #​721
• Document update - permission section by @​harithavattikuti in #​840
• Improvement in documentation for pull_request_target event usage in README by @​suyashgaonkar in #​871
• Fix broken links in documentation by @​suyashgaonkar in #​822

New Contributors

• @​silverwind made their first contribution in #​669
• @​Jcambass made their first contribution in #​802
• @​suyashgaonkar made their first contribution in #​822
• @​HarithaVattikuti made their first contribution in #​840
• @​salmanmkc made their first contribution in #​891

Full Changelog: actions/labeler@v5...v6.0.0

actions/upload-artifact (actions/upload-artifact)

v6.0.0

Compare Source

---

Configuration

📅 Schedule: Branch creation - "after 10:00 before 19:00 every weekday except after 13:00 before 14:00" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Note

Modernizes GitHub Actions by updating pinned versions in workflows.

• Bump actions/labeler to v6.0.1 in /.github/workflows/labeler.yml (updated commit SHA)
• Bump actions/upload-artifact to v6.0.0 in /.github/workflows/scorecards.yml (updated commit SHA)

^{Written by Cursor Bugbot for commit 370a681. This will update automatically on new commits. Configure here.}

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Thank you for following the naming conventions! 🙏