chore(deps): update bcgov/actions action to v0.6.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
bcgov/actions	action	minor	v0.5.0 → v0.6.0	v0.7.1 (+1)

---

Release Notes

bcgov/actions (bcgov/actions)

v0.6.0

Compare Source

What's Changed

• chore(ci): adopt self-repository syntax for internal action refs by @​DerekRoberts in #​136
• chore(deps): update node.js to v24.19.0 by @​renovate[bot] in #​137
• feat(actionlint): checkout automatically, and drop skip_checkout for detection by @​DerekRoberts in #​139
• test(builder-ghcr): cover the diff path with a self-repo case by @​DerekRoberts in #​140
• fix(test-and-analyse): detect shallow via git, not .git/shallow by @​DerekRoberts in #​141
• feat(actions): add pr-validate composite action by @​DerekRoberts in #​138
• refactor(diff-triggers): node24 by @​DerekRoberts in #​147
• refactor(ci): migrate from central router to native path triggers by @​DerekRoberts in #​148
• feat: drop actionlint composite action by @​DerekRoberts in #​149
• chore(deps): update dependency @​vercel/ncc to ^0.45.0 by @​renovate[bot] in #​151
• chore(deps): lock file maintenance by @​renovate[bot] in #​152
• feat(image-tracker): render provenance audit table in GITHUB_STEP_SUMMARY by @​DerekRoberts in #​150
• chore(deps): update dependency bcgov/renovate-config to v2026.8.18 by @​renovate[bot] in #​155
• fix(pr-description-add): upgrade js-yaml to resolve flow collection DoS vulnerability by @​DerekRoberts in #​156
• refactor(image-tracker): migrate action from bash to zero-dependency node24 by @​DerekRoberts in #​154
• feat(builder-ghcr): fork-safe builds with GHCR visibility guidance by @​DerekRoberts in #​158
• fix(pr-validate): warn on fork PRs instead of blocking by @​DerekRoberts in #​162
• fix(pr-description-add): no-op on fork pull requests by @​DerekRoberts in #​163
• feat(image-tracker): fork-aware resolution and empty digest on miss by @​DerekRoberts in #​166
• fix(builder-ghcr): remove pushed output by @​DerekRoberts in #​167
• fix(image-tracker): resolve fork PR head SHA from origin by @​DerekRoberts in #​168
• chore(deps): update actions/setup-java action to v6 by @​renovate[bot] in #​171
• fix(ci): add .tool-versions to test triggers, node.js to v24.20.0 by @​DerekRoberts in #​172
• feat(test-and-analyse): auto-detect cache with workspace root fallback and fail-fast validation by @​DerekRoberts in #​174
• feat: standardize on token input across all actions by @​DerekRoberts in #​175
• ci(test.yml): narrow workflows filter to test.yml and map workflow files to actions by @​DerekRoberts in #​176
• feat(workflow-notifier): notify PR merge author with fallback CODEOWNERS by @​DerekRoberts in #​177
• fix(workflow-notifier): PR lookup retry, event routing, max assignees by @​DerekRoberts in #​178
• perf(image-tracker): add direct-hit tag probing before paginating registry list by @​DerekRoberts in #​179
• chore(deps): lock file maintenance by @​renovate[bot] in #​181
• feat(image-tracker): automatically fetch git history based on max_depth by @​DerekRoberts in #​180
• fix(image-tracker): resolve PR images labeled with merge commit revision by @​DerekRoberts in #​182
• fix(image-tracker): resolve synthetic merge PR images for squash merges by @​DerekRoberts in #​186
• refactor: standardize strict token input across actions by @​DerekRoberts in #​190
• feat(test-and-analyse): auto-detect Node version from project files by @​DerekRoberts in #​191
• feat(image-tracker): provide detailed diagnostic summary when image resolution fails by @​DerekRoberts in #​194
• fix(pr-description-add): resolve dependabot security vulnerabilities by @​DerekRoberts in #​195
• refactor(ci): remove legacy reusable workflows and dogfood pr-validate action by @​DerekRoberts in #​197
• fix(image-tracker): restore default max_depth to 100 by @​DerekRoberts in #​199
• chore: remove pr-validate and pr-description-add by @​DerekRoberts in #​201
• chore(get-pr): remove get-pr in favor of image-tracker by @​DerekRoberts in #​202
• chore(deps): update dependency bcgov/renovate-config to v2026.9.9 by @​renovate[bot] in #​206
• chore(deps): update vitest monorepo to v5 by @​renovate[bot] in #​207
• revert: restore pr-description-add and pr-validate by @​DerekRoberts in #​208
• refactor(builder): rename builder-ghcr to builder by @​DerekRoberts in #​215
• docs: teach multiline triggers in suite examples by @​DerekRoberts in #​220
• docs: pre-v1.0 documentation and repo hygiene by @​DerekRoberts in #​221
• fix(image-tracker): fail-fast miss, default max_depth 1 by @​DerekRoberts in #​219
• feat(test-and-analyse): auto-detect Python and Java versions by @​DerekRoberts in #​222
• ci(image-tracker): walk history for the latest digest by @​DerekRoberts in #​223
• fix(builder): stamp OCI revision with source_sha, not GITHUB_SHA by @​DerekRoberts in #​226
• docs: drop SHA-pin soak wording and Builder GHCR job names by @​DerekRoberts in #​225
• ci: Node action dist freshness check (#​99 slice) by @​DerekRoberts in #​227
• refactor: centralize Node actions with npm workspaces and shared tooling by @​DerekRoberts in #​228

Full Changelog: bcgov/actions@v0.5.0...v0.6.0

---

Configuration

📅 Schedule: (in timezone America/Vancouver)

• Branch creation
  • "after 2am and before 8am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.