chore(deps): update workflow dependencies (minor & patch) (#184)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [docker.io/thegeeklab/git-sv](https://github.com/thegeeklab/git-sv) | container | patch | `3.0.1` → `3.0.2` |
| [volker-raschek/ah-annotations](https://github.com/volker-raschek/ah-annotations) | action | patch | `v0.2.1` → `v0.2.2` |

---

### Release Notes

<details>
<summary>thegeeklab/git-sv (docker.io/thegeeklab/git-sv)</summary>

### [`v3.0.2`](https://github.com/thegeeklab/git-sv/releases/tag/v3.0.2)

[Compare Source](https://github.com/thegeeklab/git-sv/compare/v3.0.1...v3.0.2)

#### v3.0.2 (2026-08-25)

##### Build

- **deps:** update golang version ([#&#8203;349](https://github.com/thegeeklab/git-sv/issues/349)) ([`a360b31`](https://github.com/thegeeklab/git-sv/commit/a360b31))
- **deps:** update module github.com/urfave/cli/v3 to v3.11.0 ([#&#8203;351](https://github.com/thegeeklab/git-sv/issues/351)) ([`4655693`](https://github.com/thegeeklab/git-sv/commit/4655693))
- **deps:** update golang devdeps non-major ([#&#8203;350](https://github.com/thegeeklab/git-sv/issues/350)) ([`68e6cce`](https://github.com/thegeeklab/git-sv/commit/68e6cce))
- **deps:** update ghcr.io/aquasecurity/trivy docker tag to v0.74.0 ([#&#8203;347](https://github.com/thegeeklab/git-sv/issues/347)) ([`f87d1a9`](https://github.com/thegeeklab/git-sv/commit/f87d1a9))
- **deps:** update golang patch version ([#&#8203;346](https://github.com/thegeeklab/git-sv/issues/346)) ([`b401399`](https://github.com/thegeeklab/git-sv/commit/b401399))
- **docker:** update docker.io/library/golang:1.26.5 docker digest to [`705e964`](https://github.com/thegeeklab/git-sv/commit/705e964) ([#&#8203;345](https://github.com/thegeeklab/git-sv/issues/345)) ([`157720d`](https://github.com/thegeeklab/git-sv/commit/157720d))
- **deps:** update ghcr.io/aquasecurity/trivy docker tag to v0.73.0 ([#&#8203;344](https://github.com/thegeeklab/git-sv/issues/344)) ([`f366637`](https://github.com/thegeeklab/git-sv/commit/f366637))
- fix gitsv patch categories ([`45cd763`](https://github.com/thegeeklab/git-sv/commit/45cd763))
- improve git-sv changelog sections ([`9bf518b`](https://github.com/thegeeklab/git-sv/commit/9bf518b))

</details>

<details>
<summary>volker-raschek/ah-annotations (volker-raschek/ah-annotations)</summary>

### [`v0.2.2`](https://github.com/volker-raschek/ah-annotations/compare/v0.2.1...v0.2.2)

[Compare Source](https://github.com/volker-raschek/ah-annotations/compare/v0.2.1...v0.2.2)

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - Only on Sunday and Saturday (`* * * * 0,6`)
- Automerge
  - Between 12:00 AM and 03:59 AM (`* 0-3 * * *`)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xOTEuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE5MS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJraW5kL2RlcGVuZGVuY3kiXX0=-->

Reviewed-on: https://gitea.com/gitea/helm-actions/pulls/184
Reviewed-by: DaanSelen <135789+daanselen@noreply.gitea.com>
Co-authored-by: Renovate Bot <renovate-bot@gitea.com>

.gitea/workflows/changelog.yml

@@ -8,7 +8,7 @@ on:
 jobs:
   changelog:
     runs-on: ubuntu-latest
-    container: docker.io/thegeeklab/git-sv:3.0.0
+    container: docker.io/thegeeklab/git-sv:3.0.2
     steps:
       - name: install tools
         run: |

.gitea/workflows/commitlint.yml

@@ -11,7 +11,7 @@ on:
 jobs:
   check-and-test:
     runs-on: ubuntu-latest
-    container: commitlint/commitlint:21.2.1
+    container: commitlint/commitlint:21.2.2
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       - name: check PR title

.gitea/workflows/release-version.yml

@@ -7,7 +7,7 @@ on:
 
 env:
   # renovate: datasource=docker depName=alpine/helm
-  HELM_VERSION: "4.2.3"
+  HELM_VERSION: "4.2.4"
 
 jobs:
   generate-chart-publish:
@@ -16,7 +16,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: install Docker CLI
-        uses: https://github.com/docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 # Gitea
+        uses: https://github.com/docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4 # Gitea
         #uses: docker/setup-buildx-action@v4 # Github / Act
 
       - name: install Helm
@@ -47,6 +47,9 @@ jobs:
           username: ${{ secrets.DOCKER_CHARTS_USERNAME }}
           password: ${{ secrets.DOCKER_CHARTS_PASSWORD }}
 
+      - name: Add Artifacthub.io annotations
+        uses: volker-raschek/ah-annotations@7959e52208294befed11210aef0c8e9299cc6a23 # v0.2.2
+
       # Using helm gpg plugin as 'helm package --sign' has issues with gpg2: https://github.com/helm/helm/issues/2843
       - name: package chart
         run: |
@@ -67,19 +70,6 @@ jobs:
         env:
           TAR_OPTIONS: "--wildcards"
 
-      - name: aws credential configure
-        uses: https://github.com/aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6 # Gitea
-        #uses: aws-actions/configure-aws-credentials@v6 # Github / Act
-        with:
-          aws-access-key-id: ${{ secrets.AWS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
-          aws-region: ${{ secrets.AWS_REGION }}
-
-      - name: copy files to S3 and clear cache
-        if: startsWith(github.ref, 'refs/tags/')
-        run: |
-          aws s3 sync actions/ s3://${{ secrets.AWS_S3_BUCKET}}/charts/
-
       - name: Copy files to Cloudflare R2
         env:
           AWS_ACCESS_KEY_ID: ${{ secrets.CLOUDFLARE_R2_ACCESS_KEY_ID }}

.gitea/workflows/test-pr.yml

@@ -16,7 +16,7 @@ env:
 jobs:
   check-and-test:
     runs-on: ubuntu-latest
-    container: alpine/helm:4.2.3
+    container: alpine/helm:4.2.4
     steps:
       - name: install tools
         run: |

pnpm-lock.yaml

@@ -33,8 +33,8 @@ packages:
   '@types/unist@2.0.11':
     resolution: {integrity: sha512-CmBKiL6NNo/OqgmMn95Fk9Whlp2mtvIv+KNpQKN2F4SjvrEesubTRWGYSg+BnWZOnlCaSTU1sMpsBOzgbYhnsA==}
 
-  ansi-regex@6.2.2:
+  ansi-regex@6.3.0:
-    resolution: {integrity: sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==}
+    resolution: {integrity: sha512-WpDfL7NO6j7tH88IDBNVdUJxDh9nmCteAVW9dsep846XdwF4naCBK+/tGLX3KJgcpgMRXCFlTM2hKGoK9FsdrQ==}
     engines: {node: '>=12'}
 
   argparse@2.0.1:
@@ -298,8 +298,8 @@ packages:
     resolution: {integrity: sha512-AVbw3UJ2e9bq64vSaS9Am0fje1Pa8pbGqTTsmXfaIiMpnr5DlDhfJOuLj9Sf95ZPVDAUerDfEk88MPmPe7UCQg==}
     engines: {node: '>=0.10.0'}
 
-  picomatch@4.0.5:
+  picomatch@4.0.7:
-    resolution: {integrity: sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==}
+    resolution: {integrity: sha512-qcJu88Q2IWqJsDD529JKMdwGm/dvInW4HvQnRwiH9JtihJvzGOscDtHE3x1pBKeUOTysQ8kVmLnJ2kJu7yhcGA==}
     engines: {node: '>=12'}
 
   punycode.js@2.3.1:
@@ -314,8 +314,8 @@ packages:
     resolution: {integrity: sha512-Lb7OKM9aaykzyoNiHGhSVCjZsvbyy6qDMp2vDXL+MoCfz3GfNJtHYH7uYsU3QNMyInBk++xx+EZ8xZ8Sxs5fNQ==}
     hasBin: true
 
-  smol-toml@1.7.1:
+  smol-toml@1.7.2:
-    resolution: {integrity: sha512-PPlsspAZ4jbMBu5DMFhfUGDQLu/vrL4SyBROVS37x8ynnVmFIs1VPBz1Co8Xks3TvpIaZXmU85y4DrQ+UyVFoQ==}
+    resolution: {integrity: sha512-pXFZ9B2WinEPzxWkMmlYE/oYx2BP+qLrE95wP8tCuK901uLSMGdCb6QSr82z+wnhXkG4+cO+OMLbZB2Cn+97zw==}
     engines: {node: '>= 18'}
 
   string-width@8.2.1:
@@ -365,7 +365,7 @@ snapshots:
 
   '@types/unist@2.0.11': {}
 
-  ansi-regex@6.2.2: {}
+  ansi-regex@6.3.0: {}
 
   argparse@2.0.1: {}
 
@@ -421,9 +421,9 @@ snapshots:
 
   entities@4.5.0: {}
 
-  fdir@6.5.0(picomatch@4.0.5):
+  fdir@6.5.0(picomatch@4.0.7):
     optionalDependencies:
-      picomatch: 4.0.5
+      picomatch: 4.0.7
 
   fs.realpath@1.0.0: {}
 
@@ -503,7 +503,7 @@ snapshots:
       markdownlint: 0.41.1
       minimatch: 10.2.6
       run-con: 1.3.3
-      smol-toml: 1.7.1
+      smol-toml: 1.7.2
       tinyglobby: 0.2.17
     transitivePeerDependencies:
       - supports-color
@@ -724,7 +724,7 @@ snapshots:
 
   path-is-absolute@1.0.1: {}
 
-  picomatch@4.0.5: {}
+  picomatch@4.0.7: {}
 
   punycode.js@2.3.1: {}
 
@@ -737,7 +737,7 @@ snapshots:
       minimist: 1.2.8
       strip-json-comments: 3.1.1
 
-  smol-toml@1.7.1: {}
+  smol-toml@1.7.2: {}
 
   string-width@8.2.1:
     dependencies:
@@ -746,14 +746,14 @@ snapshots:
 
   strip-ansi@7.2.0:
     dependencies:
-      ansi-regex: 6.2.2
+      ansi-regex: 6.3.0
 
   strip-json-comments@3.1.1: {}
 
   tinyglobby@0.2.17:
     dependencies:
-      fdir: 6.5.0(picomatch@4.0.5)
+      fdir: 6.5.0(picomatch@4.0.7)
-      picomatch: 4.0.5
+      picomatch: 4.0.7
 
   uc.micro@2.1.0: {}