chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
bcgov/action-builder-ghcr	action	minor	4.1.1 -> v4.2.1
bcgov/action-oc-runner	action	minor	v1.2.3 -> v1.3.0
python	uses-with	minor	3.13 -> 3.14
zaproxy/action-full-scan	action	minor	v0.12.0 -> v0.13.0

---

Release Notes

bcgov/action-builder-ghcr (bcgov/action-builder-ghcr)

v4.2.1

Compare Source

What's Changed

• chore(deps): update docker/metadata-action digest to 318604b by @​renovate[bot] in #​123
• fix: SBOM generation handling, permission checks by @​DerekRoberts in #​124
• chore: remove keep_versions, keep_regex inputs by @​Copilot in #​119
• doc: OCI-compliant labels generated by metadata-action by @​Copilot in #​122
• chore: use actions/attest-build-provenance by @​DerekRoberts in #​99
• feat: add docker/metadata-action for automatic tag and label generation by @​Copilot in #​118

Full Changelog: bcgov/action-builder-ghcr@v4.2.0...v4.2.1

v4.2.0

Compare Source

What's Changed

• chore(deps): update actions/upload-artifact action to v5 by @​renovate[bot] in #​114
• feat: docker/metadata-action for OCI-compliant labels and annotations by @​Copilot in #​121
• fix: SBOM artifact name collision w/ tag by @​Copilot in #​116

New Contributors

• @​Copilot made their first contribution in #​121

Full Changelog: bcgov/action-builder-ghcr@4.1.1...v4.2.0

bcgov/action-oc-runner (bcgov/action-oc-runner)

v1.3.0

Compare Source

What's Changed

• chore: allow lease token timeout to be 25 mins for some jobs, e.g. crunchy by @​mishraomp in #​47
• chore(deps): update actions/checkout action to v5 by @​renovate[bot] in #​48
• feat: oc login retries by @​DerekRoberts in #​54

Full Changelog: bcgov/action-oc-runner@v1.2.3...v1.3.0

actions/python-versions (python)

v3.14.0: 3.14.0

Compare Source

Python 3.14.0

zaproxy/action-full-scan (zaproxy/action-full-scan)

v0.13.0

Compare Source

First release to Marketplace.

---

Configuration

📅 Schedule: Branch creation - "before 6am every weekday" in timezone America/Vancouver, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Thanks for the PR!

Deployments, as required, will be available below:

• Java
• Py

Please create PRs in draft mode. Mark as ready to enable:

• Analysis Workflow

After merge, new images are deployed in:

• Merge Workflow