Update actions/checkout digest to 3d3c42e

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout (changelog)	action	digest	9c091bb → 3d3c42e

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
⚠️ ACTION	actionlint	4		2	0	0.04s
❌ ACTION	zizmor	4		17	0	1.91s
✅ COPYPASTE	jscpd	yes		no	no	0.39s
✅ JAVASCRIPT	eslint	11		0	0	1.1s
✅ JSON	jsonlint	8		0	0	0.1s
✅ JSON	npm-package-json-lint	yes		no	no	0.46s
✅ JSON	prettier	8		0	0	0.31s
✅ JSON	v8r	8		0	0	12.04s
⚠️ MARKDOWN	markdownlint	10		30	0	0.64s
⚠️ MARKDOWN	markdown-table-formatter	10		1	0	0.24s
✅ REPOSITORY	betterleaks	yes		no	no	0.92s
✅ REPOSITORY	checkov	yes		no	no	25.33s
✅ REPOSITORY	gitleaks	yes		no	no	1.09s
✅ REPOSITORY	git_diff	yes		no	no	0.01s
✅ REPOSITORY	grype	yes		no	no	59.46s
❌ REPOSITORY	osv-scanner	yes		1	no	0.66s
✅ REPOSITORY	secretlint	yes		no	no	0.82s
✅ REPOSITORY	syft	yes		no	no	2.66s
✅ REPOSITORY	trivy	yes		no	no	13.22s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.36s
✅ REPOSITORY	trufflehog	yes		no	no	2.85s
✅ SPELL	cspell	46		0	0	3.32s
⚠️ SPELL	lychee	29		4	0	0.7s
✅ TYPESCRIPT	eslint	1		0	0	0.27s
✅ TYPESCRIPT	prettier	1		0	0	0.36s
⚠️ TYPESCRIPT	ts-standard	1		1	0	0.4s
✅ YAML	prettier	9		0	0	0.43s
✅ YAML	v8r	9		0	0	6.19s
✅ YAML	yamllint	9		0	0	0.82s

Detailed Issues

❌ REPOSITORY / osv-scanner - 1 error

Scanning dir .
Starting filesystem walk for root: /
Scanned package-lock.json file and found 158 packages
End status: 52 dirs visited, 151 inodes visited, 1 Extract calls, 6.403601ms elapsed, 6.403748ms wall time

Total 1 package affected by 1 known vulnerability (0 Critical, 0 High, 1 Medium, 0 Low, 0 Unknown) from 1 ecosystem.
1 vulnerability can be fixed.

+-------------------------------------+------+-----------+---------------+---------+---------------+-------------------+
| OSV URL                             | CVSS | ECOSYSTEM | PACKAGE       | VERSION | FIXED VERSION | SOURCE            |
+-------------------------------------+------+-----------+---------------+---------+---------------+-------------------+
| https://osv.dev/GHSA-724g-mxrg-4qvm | 5.3  | npm       | js-yaml (dev) | 5.2.0   | 5.2.1         | package-lock.json |
+-------------------------------------+------+-----------+---------------+---------+---------------+-------------------+

❌ ACTION / zizmor - 17 errors

INFO zizmor: 🌈 zizmor v1.25.0
 INFO audit: zizmor: 🌈 completed .github/workflows/deploy.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/github-dependents-info.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/mega-linter.yml
 INFO audit: zizmor: 🌈 completed .github/workflows/test.yml
warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/deploy.yml:34:77
   |
34 |       - uses: actions/setup-node@HIDDEN_BY_MEGALINTER# v6
   |         -----------------------------------------------------------------   ^^ points to commit 249970729cb0
   |         |
   |         is pointed to by tag v6.4.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/deploy.yml:64:77
   |
64 |       - uses: actions/setup-node@HIDDEN_BY_MEGALINTER# v6
   |         -----------------------------------------------------------------   ^^ points to commit 249970729cb0
   |         |
   |         is pointed to by tag v6.4.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/test.yml:41:77
   |
41 |         uses: actions/setup-node@HIDDEN_BY_MEGALINTER# v6
   |         -----------------------------------------------------------------   ^^ points to commit 249970729cb0
   |         |
   |         is pointed to by tag v6.4.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

warning[ref-version-mismatch]: action's hash pin has mismatched or missing version comment
  --> .github/workflows/test.yml:45:77
   |
45 |         uses: actions/setup-java@HIDDEN_BY_MEGALINTER# v5
   |         -----------------------------------------------------------------   ^^ points to commit 03ad4de0992f
   |         |
   |         is pointed to by tag v5.4.0
   |
   = note: audit confidence → High
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#ref-version-mismatch

17 findings (3 ignored, 10 suppressed, 4 unsafe fixes): 0 informational, 0 low, 4 medium, 0 high

⚠️ ACTION / actionlint - 2 errors

.github/workflows/github-dependents-info.yml:55:9: shellcheck reported issue in this script: SC2086:info:1:15: Double quote to prevent globbing and word splitting [shellcheck]
   |
55 |         run: sudo chown -R $USER:$USER .
   |         ^~~~
.github/workflows/github-dependents-info.yml:55:9: shellcheck reported issue in this script: SC2086:info:1:21: Double quote to prevent globbing and word splitting [shellcheck]
   |
55 |         run: sudo chown -R $USER:$USER .
   |         ^~~~

⚠️ SPELL / lychee - 4 errors

📝 Summary
---------------------
🔍 Total...........74
🔗 Unique..........62
✅ Successful......23
⏳ Timeouts.........0
🔀 Redirected.......7
👻 Excluded........47
❓ Unknown..........0
🚫 Errors...........4
⛔ Unsupported......4

Errors in README.md
[403] https://npmjs.org/package/java-caller (at 5:1) | Rejected status code: 403 Forbidden | Followed 1 redirect. Redirects: https://npmjs.org/package/java-caller --[301]--> https://www.npmjs.com/package/java-caller
[403] https://npmjs.org/package/java-caller (at 6:1) | Rejected status code: 403 Forbidden | Followed 1 redirect. Redirects: https://npmjs.org/package/java-caller --[301]--> https://www.npmjs.com/package/java-caller
[403] https://www.npmjs.com/package/java-caller (at 4:1) | Rejected status code: 403 Forbidden
[403] https://www.npmjs.com/package/njre (at 16:145) | Rejected status code: 403 Forbidden

Hint: Followed 7 redirects. You might want to consider replacing redirecting URLs with the resolved URLs. Use verbose mode (`-v`/`-vv`) to see redirection details.
Hint: You can configure accepted/rejected response codes with `-a` or `--accept`

⚠️ MARKDOWN / markdown-table-formatter - 1 error

1 files contain markdown tables to format:
- README.md

⚠️ MARKDOWN / markdownlint - 30 errors

.claude/agents/pr-fix.md:9:401 error MD013/line-length Line length [Expected: 400; Actual: 406]
.claude/agents/pr-fix.md:9 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "You are the smart fixer for **..."]
.claude/agents/pr-fix.md:11:401 error MD013/line-length Line length [Expected: 400; Actual: 458]
.claude/agents/pr-fix.md:19:401 error MD013/line-length Line length [Expected: 400; Actual: 511]
.claude/agents/pr-fix.md:27:401 error MD013/line-length Line length [Expected: 400; Actual: 712]
.claude/agents/pr-fix.md:44 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.claude/agents/pr-watch.md:9 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "You collect data about a GitHu..."]
.claude/agents/pr-watch.md:65:9 error MD038/no-space-in-code Spaces inside code span elements [Context: "`error  `"]
.claude/agents/pr-watch.md:77 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.claude/skills/pr-watch-fix/SKILL.md:9 error MD041/first-line-heading/first-line-h1 First line in a file should be a top-level heading [Context: "Watch the open PR for the curr..."]
.claude/skills/pr-watch-fix/SKILL.md:52 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
.claude/skills/pr-watch-fix/SKILL.md:81:401 error MD013/line-length Line length [Expected: 400; Actual: 448]
.claude/skills/pr-watch-fix/SKILL.md:105 error MD040/fenced-code-language Fenced code blocks should have a language specified [Context: "```"]
CODE_OF_CONDUCT.md:58:44 error MD034/no-bare-urls Bare URL used [Context: "nicolas.vuillamy@gmail.com"]
CODE_OF_CONDUCT.md:71:14 error MD034/no-bare-urls Bare URL used [Context: "https://www.contributor-covena..."]
CODE_OF_CONDUCT.md:76:1 error MD034/no-bare-urls Bare URL used [Context: "https://www.contributor-covena..."]
README.md:66:13 error MD060/table-column-style Table column style [Table pipe is missing space to the left for style "compact"]
README.md:66:27 error MD060/table-column-style Table column style [Table pipe is missing space to the left for style "compact"]
README.md:66:37 error MD060/table-column-style Table column style [Table pipe is missing space to the left for style "compact"]
README.md:66:47 error MD060/table-column-style Table column style [Table pipe is missing space to the left for style "compact"]
README.md:66:1 error MD060/table-column-style Table column style [Table pipe is missing space to the right for style "compact"]
README.md:66:13 error MD060/table-column-style Table column style [Table pipe is missing space to the right for style "compact"]
README.md:66:27 error MD060/table-column-style Table column style [Table pipe is missing space to the right for style "compact"]
README.md:66:37 error MD060/table-column-style Table column style [Table pipe is missing space to the right for style "compact"]
README.md:67:361 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:69:123 error MD060/table-column-style Table column style [Table pipe has extra space to the left for style "compact"]
README.md:73:315 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:74:310 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:75:208 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]
README.md:76:233 error MD055/table-pipe-style Table pipe style [Expected: leading_and_trailing; Actual: leading_only; Missing trailing pipe]

⚠️ TYPESCRIPT / ts-standard - 1 error

Unable to locate the project file. A project file (tsconfig.json or tsconfig.eslint.json) is required in order to use ts-standard.

Notices

📣 MegaLinter 9.5.0 is out! Discover the new features and security recommendations in the release announcement. (Skip this info by defining SECURITY_SUGGESTIONS: false)

See detailed reports in MegaLinter artifacts

Your project could benefit from a custom flavor, which would allow you to run only the linters you need, and thus improve runtime performances. (Skip this info by defining FLAVOR_SUGGESTIONS: false)

• Documentation: Custom Flavors
• Command: npx mega-linter-runner@9.6.0 --custom-flavor-setup --custom-flavor-linters ACTION_ACTIONLINT,ACTION_ZIZMOR,COPYPASTE_JSCPD,JAVASCRIPT_ES,JSON_JSONLINT,JSON_V8R,JSON_PRETTIER,JSON_NPM_PACKAGE_JSON_LINT,MARKDOWN_MARKDOWNLINT,MARKDOWN_MARKDOWN_TABLE_FORMATTER,REPOSITORY_CHECKOV,REPOSITORY_GIT_DIFF,REPOSITORY_GITLEAKS,REPOSITORY_BETTERLEAKS,REPOSITORY_GRYPE,REPOSITORY_OSV_SCANNER,REPOSITORY_SECRETLINT,REPOSITORY_SYFT,REPOSITORY_TRIVY,REPOSITORY_TRIVY_SBOM,REPOSITORY_TRUFFLEHOG,SPELL_CSPELL,SPELL_LYCHEE,TYPESCRIPT_ES,TYPESCRIPT_STANDARD,TYPESCRIPT_PRETTIER,YAML_PRETTIER,YAML_YAMLLINT,YAML_V8R

Show us your support by starring ⭐ the repository