chore(deps): update github-actions dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/upload-artifact	action	digest	b4b15b8 -> 65c4c4a
docker/setup-buildx-action	action	digest	c47758b -> 6524bf6
docker/setup-qemu-action	action	digest	49b3bc8 -> 53851d1
reviewdog/action-yamllint	action	minor	v1.19.0 -> v1.20.0

---

Release Notes

reviewdog/action-yamllint (reviewdog/action-yamllint)

v1.20.0

Compare Source

What's Changed

• Add fail_level and deduplicate fail_on_error by @​massongit in https://github.com/reviewdog/action-yamllint/pull/45

New Contributors

• @​massongit made their first contribution in https://github.com/reviewdog/action-yamllint/pull/45

Full Changelog: reviewdog/action-yamllint@v1.19.0...v1.20.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[village-labs-bot]

upbound/configuration-gcp-database #50

Change Summary:

• Dependency update for yamllint GitHub Action from version 1.19.0 to 1.20.0, with corresponding hash update
• Maintainance update focused on GitHub Actions workflow tooling
• Minimal change to existing CI/CD pipeline configuration

Potential Vulnerabilities:

• File: .github/workflows/yamllint.yaml:8
• Code: uses: reviewdog/action-yamllint@1dca3ad811867be18fbe293a9818d715a6c2cd46 # v1.20.0
• Explanation: While this is a version bump of a trusted action, any change to GitHub Action references should be carefully reviewed. The commit hash should be verified against the official repository to ensure it matches the tagged release v1.20.0 to prevent supply chain attacks.

Code Smells:

None identified in this change.

Debug Logs:

None identified in this change.

Unintended Consequences:

• File: .github/workflows/yamllint.yaml:8
• Code: uses: reviewdog/action-yamllint@1dca3ad811867be18fbe293a9818d715a6c2cd46 # v1.20.0
• Explanation: Version updates in CI/CD tools can sometimes introduce breaking changes or different behavior in linting rules. The changelog for yamllint action 1.20.0 should be reviewed to understand any potential changes in YAML validation that might affect existing configurations.

Risk Score: 3

While this is a minor version update of a CI tool, any changes to the CI/CD pipeline carry some inherent risk. The score reflects the need for proper verification of the action's commit hash and review of changelog, but acknowledges this is a relatively safe dependency update.