chore(deps): update actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
actions/setup-python (changelog)	action	digest	83679a8 → a309ff8
github/codeql-action (changelog)	action	digest	cdefb33 → b20883b
reviewdog/action-hadolint	action	patch	v1.50.2 → v1.50.5

---

Release Notes

reviewdog/action-hadolint (reviewdog/action-hadolint)

v1.50.5

Compare Source

What's Changed

• chore(deps): update peter-evans/create-pull-request action to v8 by @​renovate[bot] in #​141

Full Changelog: reviewdog/action-hadolint@v1.50.4...v1.50.5

v1.50.4

Compare Source

v1.50.3

Compare Source

What's Changed

• chore(deps): update reviewdog/action-misspell action to v1.26.2 by @​renovate[bot] in #​124
• chore(deps): update haya14busa/action-depup action to v1.6.4 by @​renovate[bot] in #​123
• chore(deps): update reviewdog/action-shellcheck action to v1.29.3 by @​renovate[bot] in #​126
• chore(deps): update reviewdog/action-misspell action to v1.26.3 by @​renovate[bot] in #​125
• chore(deps): update reviewdog/action-yamllint action to v1.20.2 by @​renovate[bot] in #​127
• chore(deps): update reviewdog/action-yamllint action to v1.21.0 by @​renovate[bot] in #​128
• README: Pin GitHub Actions with commit SHA using pinact by @​haya14busa in #​129
• chore(deps): update actions/checkout action to v4.3.1 by @​renovate[bot] in #​133

Full Changelog: reviewdog/action-hadolint@v1.50.2...v1.50.3

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/github/codeql-action/analyze	b20883b0cd1f46c72ae0ba6d1090936928f9fa30	Unknown	Unknown
actions/github/codeql-action/init	b20883b0cd1f46c72ae0ba6d1090936928f9fa30	Unknown	Unknown

Scanned Files

• .github/workflows/security.yml

[github-actions]

[yamllint] _{reported by reviewdog 🐶}
[warning] line too long (339 > 185 characters) (line-length)

tux/.github/workflows/ci.yml

Line 35 in d4f1036

any: ${{ steps.python_changes.outputs.any_changed == 'true' || steps.markdown_changes.outputs.any_changed == 'true' || steps.shell_changes.outputs.any_changed == 'true' || steps.workflow_changes.outputs.any_changed == 'true' || steps.docker_changes.outputs.any_changed == 'true' || steps.yaml_changes.outputs.any_changed == 'true' }}

[cubic-dev-ai]

No issues found across 3 files

Confidence score: 5/5

• Automated review surfaced no issues in the provided summaries.
• No files require special attention.

[sentry]

❌ 4 Tests Failed:

Tests completed	Failed	Passed	Skipped
577	4	573	36

View the full list of 4 ❄️ flaky test(s)

tests/database/test_migration_error_handling.py::TestMigrationErrorHandling::test_migration_error_message_helpful

Flake rate in main: 100.00% (Passed 0 times, Failed 18 times)

Stack Traces | 0.012s run time

tests/database/test_migration_error_handling.py:108: in test_migration_error_message_helpful
    await setup_service._upgrade_head_if_needed()
.../core/setup/database_setup.py:123: in _upgrade_head_if_needed
    script_dir = ScriptDirectory.from_config(cfg)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
.venv/lib/python3.13.../alembic/script/base.py:186: in from_config
    return ScriptDirectory(
.venv/lib/python3.13.../alembic/script/base.py:105: in __init__
    raise util.CommandError(
E   alembic.util.exc.CommandError: Path doesn't exist: MagicMock/_build_alembic_config().get_alembic_option()/139801258681280.  Please use the 'init' command to create a new scripts folder.

tests/database/test_migration_error_handling.py::TestMigrationErrorHandling::test_migration_failure_raises_error

Flake rate in main: 100.00% (Passed 0 times, Failed 18 times)

Stack Traces | 0.01s run time

tests/database/test_migration_error_handling.py:73: in test_migration_failure_raises_error
    await setup_service._upgrade_head_if_needed()
.../core/setup/database_setup.py:123: in _upgrade_head_if_needed
    script_dir = ScriptDirectory.from_config(cfg)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
.venv/lib/python3.13.../alembic/script/base.py:186: in from_config
    return ScriptDirectory(
.venv/lib/python3.13.../alembic/script/base.py:105: in __init__
    raise util.CommandError(
E   alembic.util.exc.CommandError: Path doesn't exist: MagicMock/_build_alembic_config().get_alembic_option()/139801468217600.  Please use the 'init' command to create a new scripts folder.

tests/database/test_migration_error_handling.py::TestMigrationErrorHandling::test_migration_timeout_raises_error

Flake rate in main: 100.00% (Passed 0 times, Failed 18 times)

Stack Traces | 0.01s run time

tests/database/test_migration_error_handling.py:50: in test_migration_timeout_raises_error
    await setup_service._upgrade_head_if_needed()
.../core/setup/database_setup.py:123: in _upgrade_head_if_needed
    script_dir = ScriptDirectory.from_config(cfg)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
.venv/lib/python3.13.../alembic/script/base.py:186: in from_config
    return ScriptDirectory(
.venv/lib/python3.13.../alembic/script/base.py:105: in __init__
    raise util.CommandError(
E   alembic.util.exc.CommandError: Path doesn't exist: MagicMock/_build_alembic_config().get_alembic_option()/139801462560752.  Please use the 'init' command to create a new scripts folder.

tests/help/test_help_permission_filtering.py::TestHelpPermissionFiltering::test_get_command_categories_filters_commands

Flake rate in main: 100.00% (Passed 0 times, Failed 14 times)

Stack Traces | 0.013s run time

tests/help/test_help_permission_filtering.py:322: in test_get_command_categories_filters_commands
    categories = await help_data.get_command_categories()
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
.../tux/help/data.py:102: in get_command_categories
    can_run_map = await self.batch_can_run_commands(all_commands)
                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
.../tux/help/data.py:417: in batch_can_run_commands
    permission_system = get_permission_system()
                        ^^^^^^^^^^^^^^^^^^^^^^^
.../tux/core/permission_system.py:951: in get_permission_system
    raise RuntimeError(error_msg)
E   RuntimeError: Permission system not initialized. Call init_permission_system() first.

To view more test analytics, go to the [Prevent Tests Dashboard](https://All Things Linux.sentry.io/prevent/tests/?preventPeriod=30d&integratedOrgName=allthingslinux&repository=tux&branch=renovate%2Factions)