⬆️ Update GitHub Actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
Songmu/tagpr	action	minor	v1.8.4 → v1.17.1
actions/checkout	action	patch	v4.3.0 → v4.3.1
actions/checkout	action	patch	v5.0.0 → v5.0.1
actions/create-github-app-token	action	minor	v2.0.6 → v2.2.2
actions/setup-go	action	minor	v5.5.0 → v5.6.0
actions/setup-go	action	minor	v6.0.0 → v6.4.0

---

Release Notes

Songmu/tagpr (Songmu/tagpr)

v1.17.1

Compare Source

• add gh2changelog/LICENSE by @​Songmu in #​313
• Fix PR description including already shipped PRs when using fixedMajorVersion by @​Konboi in #​317
• build(deps): bump Songmu/tagpr from 1.15.0 to 1.17.0 by @​dependabot[bot] in #​316
• update google/go-github from v82 to v83 by @​Songmu in #​319

v1.17.0

Compare Source

• Add fixedMajorVersion option for multiple major version support by @​Konboi in #​296

v1.16.0

Compare Source

• docs: improve README for labels and env vars by @​tokuhirom in #​300
• Use scoped release yaml path in github releases by @​wreulicke in #​304
• fix: latestSemverTag returns empty for zero-padded calver tags by @​k1LoW in #​303
• build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 by @​dependabot[bot] in #​305
• build(deps): bump github.com/Songmu/gitconfig from 0.2.1 to 0.2.2 by @​dependabot[bot] in #​299
• Migrate gh2changelog to monorepo as local submodule by @​Copilot in #​307
• Fix: validate tagPrefix in isTagPR for monorepo isolation by @​Copilot in #​311

v1.15.0

Compare Source

• feat: allow tagpr.calendarVersioning to accept format string directly by @​k1LoW in #​295

v1.14.0

Compare Source

• feat: scoped release configuration by @​wreulicke in #​291
• [fix] care nil ReleaseYAML by @​Songmu in #​293

v1.13.0

Compare Source

• Add Calendar Versioning (CalVer) support by @​fujiwara in #​288
• build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by @​dependabot[bot] in #​289

v1.12.1

Compare Source

• fix: pass changelog file path to gh2changelog by @​wreulicke in #​286

v1.12.0

Compare Source

• feat: add changelogFile for monorepo support by @​wreulicke in #​283
• build(deps): bump actions/setup-go from 6.1.0 to 6.2.0 by @​dependabot[bot] in #​281

v1.11.1

Compare Source

• fix: add check for both release.yml and release.yaml files by @​nnnkkk7 in #​275
• feat: add base_tag output for GitHub Actions by @​178inaba in #​277
• fix: scope git log to tagPrefix path in monorepo mode by @​biosugar0 in #​274

v1.11.0

Compare Source

• build(deps): bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 by @​dependabot[bot] in #​265
• build(deps): bump codecov/codecov-action from 5.5.1 to 5.5.2 by @​dependabot[bot] in #​266
• build(deps): bump github.com/Songmu/gitsemvers from 0.0.3 to 0.1.0 by @​dependabot[bot] in #​269
• Add tagPrefix configuration for monorepo support by @​biosugar0 in #​268
• build(deps): bump github.com/Songmu/gh2changelog from 0.3.0 to 0.4.0 by @​dependabot[bot] in #​270

v1.10.0

Compare Source

• Preserve file modes by @​hekki in #​263

v1.9.2

Compare Source

• config: introduce setFromGitconfig, reloadField, reloadBoolField meth… by @​12ya in #​251

v1.9.1

Compare Source

• build(deps): bump actions/create-github-app-token from 2.1.1 to 2.1.4 by @​dependabot[bot] in #​244
• build(deps): bump haya14busa/action-update-semver from 1.5.0 to 1.5.1 by @​dependabot[bot] in #​245
• build(deps): bump golang.org/x/oauth2 from 0.31.0 to 0.32.0 by @​dependabot[bot] in #​247
• tagpr: Refactor label addition logic in Run method by @​12ya in #​252
• util.go: remove unnecessary middle man by @​12ya in #​250
• build(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 by @​dependabot[bot] in #​256
• build(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.0 by @​dependabot[bot] in #​259
• build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 by @​dependabot[bot] in #​258
• build(deps): bump actions/checkout from 5.0.0 to 6.0.0 by @​dependabot[bot] in #​257
• build(deps): bump actions/create-github-app-token from 2.2.0 to 2.2.1 by @​dependabot[bot] in #​261
• build(deps): bump actions/checkout from 6.0.0 to 6.0.1 by @​dependabot[bot] in #​260
• tagpr: Refactor version file and command execution logic by @​12ya in #​253
• tagpr: add *tag pr method getNextLabels and debloat Run func by @​12ya in #​249

v1.9.0

Compare Source

• build(deps): bump haya14busa/action-update-semver from 1.3.0 to 1.5.0 by @​dependabot[bot] in #​240
• chore: replace github.Bool to github.Str by @​Songmu in #​241
• feat: replace compare link in pull request body by @​Songmu in #​243

actions/checkout (actions/checkout)

v4.3.1

Compare Source

What's Changed

• Port v6 cleanup to v4 by @​ericsciple in #​2305

Full Changelog: actions/checkout@v4...v4.3.1

actions/create-github-app-token (actions/create-github-app-token)

v2.2.2

Compare Source

Bug Fixes

• deps: bump @​actions/core from 1.11.1 to 3.0.0 (#​337) (b044133)
• deps: bump minimatch from 9.0.5 to 9.0.9 (#​335) (5cbc656)
• deps: bump the production-dependencies group with 4 updates (#​336) (6bda5bc)
• deps: bump undici from 7.16.0 to 7.18.2 (#​323) (b4f638f)

v2.2.1

Compare Source

Bug Fixes

• deps: bump the production-dependencies group with 2 updates (#​311) (b212e6a)

v2.2.0

Compare Source

Bug Fixes

• deps: bump glob from 10.4.5 to 10.5.0 (#​305) (5480f43)
• deps: bump p-retry from 6.2.1 to 7.1.0 (#​294) (dce3be8)
• deps: bump the production-dependencies group with 2 updates (#​292) (55e2a4b)

Features

• update permission inputs (#​296) (d90aa53)

v2.1.4

Compare Source

Bug Fixes

• deps: bump @​octokit/auth-app from 7.2.1 to 8.0.1 (#​257) (bef1eaf)

v2.1.3

Compare Source

Bug Fixes

• deps: bump undici from 7.8.0 to 7.10.0 in the production-dependencies group (#​254) (f3d5ec2)

v2.1.2

Compare Source

Bug Fixes

• deps: bump @​octokit/request from 9.2.3 to 10.0.2 (#​256) (5d7307b)

v2.1.1

Compare Source

Bug Fixes

• revert "use node24 as runner" (#​278) (5204204), closes actions/create-github-app-token#267

v2.1.0

Compare Source

Features

• use node24 as runner (#​267) (a1cbe0f)

actions/setup-go (actions/setup-go)

v5.6.0

Compare Source

What's Changed

• Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @​aparnajyothi-y in #​689

Full Changelog: actions/setup-go@v5...v5.6.0

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Auto reviews are limited based on label configuration.

🏷️ Required labels (at least one) (1)

• auto-review

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}