chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
codecov/codecov-action	action	patch	v6.0.0 → v6.0.1
step-security/harden-runner	action	patch	v2.19.1 → v2.19.4
tombi-toml/setup-tombi	action	minor	v1.0.11 → v1.1.1

---

Release Notes

codecov/codecov-action (codecov/codecov-action)

v6.0.1

Compare Source

What's Changed

• fix: prevent template injection in run: steps (VULN-1652) by @​thomasrockhu-codecov in #​1947
• chore(release): 6.0.1 by @​thomasrockhu-codecov in #​1949

Full Changelog: codecov/codecov-action@v6.0.0...v6.0.1

step-security/harden-runner (step-security/harden-runner)

v2.19.4

Compare Source

What's Changed

• Improvements for HTTPS Monitoring for the Enterprise tier of Harden Runner

Full Changelog: step-security/harden-runner@v2.19.3...v2.19.4

v2.19.3

Compare Source

What's Changed

• Default to audit mode when api-key missing with use-policy-store by @​varunsh-coder in #​665

Full Changelog: step-security/harden-runner@v2.19.2...v2.19.3

v2.19.2

Compare Source

What's Changed

• Update the Harden Runner agent for enterprise tier to use go 1.26 and fix minor bugs.

Full Changelog: step-security/harden-runner@v2.19.1...v2.19.2

tombi-toml/setup-tombi (tombi-toml/setup-tombi)

v1.1.1

Compare Source

What's Changed

• [codex] Automate release note generation on version tags by @​ya7010 in #​38

Full Changelog: tombi-toml/setup-tombi@v1...v1.1.1

v1.1.0

Compare Source

What's Changed

Starting with this version, we will synchronize tombi with version control.

• update: version by @​ya7010 in #​33
• Clarify enable-cache behavior in README by @​ya7010 in #​35
• Sync package version before retagging by @​ya7010 in #​34
• [codex] Align setup-tombi versioning by @​ya7010 in #​36
• Unify release tag and version sync workflows by @​ya7010 in #​37

Full Changelog: tombi-toml/setup-tombi@v1.0...v1.1.0

v1.1

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

⚠️ JUnit XML file not found

The CLI was unable to find any JUnit XML files to upload.
For more help, visit our troubleshooting guide.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud