[renovate]

This PR contains the following updates:

Package	Type	Update	Change
bcgov/actions	action	minor	v0.9.0 → v0.10.0

---

Release Notes

bcgov/actions

v0.10.0

Compare Source

What's Changed

• fix(ci): ncc in-job so lockfile PRs do not need committed dist by @​DerekRoberts in #​238
• docs: drop syntax and fork guides from the suite README by @​DerekRoberts in #​239
• chore(deps): lock file maintenance by @​renovate[bot] in #​236
• feat(workflow-notifier): comment on one open issue per title by @​DerekRoberts in #​241
• feat(image-tracker): opt-in tags input with guarded latest by @​DerekRoberts in #​244
• feat(scan-url): action to scan URL with ZAP and Nuclei by @​DerekRoberts in #​245
• chore(test-and-analyse): point package.json repository at bcgov/actions by @​DerekRoberts in #​250
• docs: move assistant rules to tool-neutral AGENTS.md by @​DerekRoberts in #​254
• chore(deps): update dependency bcgov/renovate-config to v2026.9.26 by @​renovate[bot] in #​257
• chore(deps): update sonarsource/sonarqube-scan-action digest to ba9859e by @​renovate[bot] in #​256
• feat(pr-validate): lint workflows with actionlint by @​DerekRoberts in #​259
• fix(test): expect the PR for the labeled image by @​DerekRoberts in #​260
• test(diff-triggers): assert against a fixture commit, not the PR's changes by @​DerekRoberts in #​255
• chore(pr-description-add): point package.json repository at bcgov/actions by @​DerekRoberts in #​261
• refactor(test-and-analyse): run the reporter on the Actions Node 24 runtime by @​DerekRoberts in #​262
• test(scan-url): scan quickstart frontend and backend together by @​DerekRoberts in #​263
• chore(deps): lock file maintenance by @​renovate[bot] in #​267
• chore(deps): update sonarsource/sonarqube-scan-action digest to d209202 by @​renovate[bot] in #​268
• ci(test): run test suite on pull requests only by @​DerekRoberts in #​275
• feat(builder): publish arm64 images as their own package by @​DerekRoberts in #​274
• feat(test-and-analyse): optional Semgrep scan by @​DerekRoberts in #​266
• feat(ghcr-cleanup): delete unused images by @​DerekRoberts in #​276
• docs(agents): README usage examples follow quickstart-openshift by @​DerekRoberts in #​277
• fix(pr-validate): accept ubuntu-26.04 and caller runner labels in actionlint by @​DerekRoberts in #​278
• docs: migration guides for retiring builder and test-and-analyse repos by @​DerekRoberts in #​279
• docs: drop deprecation wording from the replacement actions by @​DerekRoberts in #​282
• chore(deps): lock file maintenance by @​renovate[bot] in #​284
• feat!: pre-v1.0 cleanup (diff-triggers, test-and-analyse docs, remove sysdig-monitor) by @​DerekRoberts in #​286
• docs: drop experimental notes; sysdig-monitor is stable by @​DerekRoberts in #​287
• ci: skip action tests on Markdown-only changes by @​DerekRoberts in #​288
• ci: add Validate Results job to pr-validate by @​DerekRoberts in #​289
• feat(get-pr): restore get-pr as a drop-in for bcgov/action-get-pr by @​DerekRoberts in #​290
• ci: keep dist off main and add it only on release commits by @​DerekRoberts in #​294

Full Changelog: bcgov/actions@v0.7.1...v0.10.0

---

Configuration

📅 Schedule: (in timezone America/Vancouver)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Repository UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 279b8419-9cef-49df-a83f-63d8a731b7ae

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}