chore(deps): update chainguard-dev/actions action to v1.6.21

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
chainguard-dev/actions	action	patch	v1.6.19 → v1.6.21

---

Release Notes

chainguard-dev/actions (chainguard-dev/actions)

v1.6.21

Compare Source

What's Changed

• Update git tag by @​cpanato in #​915
• fix release workflow by @​cpanato in #​921
• build(deps): bump peter-evans/create-pull-request from 5.0.0 to 8.1.1 in /release-notes by @​dependabot[bot] in #​920
• build(deps): bump actions/checkout from 4.2.2 to 6.0.2 in /release-notes by @​dependabot[bot] in #​919
• build(deps): bump chainguard-dev/actions from 1.0.2 to 1.6.19 in /release-notes by @​dependabot[bot] in #​918
• build(deps): bump sigstore/cosign-installer from 3.8.0 to 4.1.2 in /chainguard-install by @​dependabot[bot] in #​917
• build(deps): bump peter-evans/create-pull-request from 7.0.8 to 8.1.1 in /bump-go-version-file by @​dependabot[bot] in #​916

Full Changelog: chainguard-dev/actions@v1.6.20...v1.6.21

v1.6.20

Compare Source

What's Changed

• build(deps): bump chainguard-dev/actions from 1.6.18 to 1.6.19 in /wolfi-build-pkg by @​dependabot[bot] in #​900
• build(deps): bump chainguard-dev/actions from 1.6.18 to 1.6.19 in /melange-build by @​dependabot[bot] in #​899
• build(deps): bump chainguard-dev/actions from 1.6.18 to 1.6.19 in /gofmt by @​dependabot[bot] in #​896
• build(deps): bump chainguard-dev/actions from 1.6.18 to 1.6.19 in /goimports by @​dependabot[bot] in #​897
• build(deps): bump step-security/harden-runner from 2.19.0 to 2.19.1 by @​dependabot[bot] in #​895
• build(deps): bump chainguard-dev/actions from 1.6.18 to 1.6.19 in /inky-build-pkg by @​dependabot[bot] in #​898
• build(deps): bump actions/setup-node from 4.4.0 to 6.4.0 by @​dependabot[bot] in #​893
• build(deps): bump chainguard-dev/actions from 1.6.18 to 1.6.19 by @​dependabot[bot] in #​894
• fix(ci): harden against template injection and credential exposure by @​stevebeattie in #​901
• build(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 in /setup-argo-workflows by @​dependabot[bot] in #​902
• bump tf-docs by @​cpanato in #​903
• test-setup-kind: add explicit kvm-available and kvm-unavailable legs. by @​mattmoor in #​905
• build(deps): bump hashicorp/setup-terraform from 4.0.0 to 4.0.1 in /setup-terraform by @​dependabot[bot] in #​906
• build(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 by @​dependabot[bot] in #​908
• build(deps): bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 by @​dependabot[bot] in #​909
• build(deps): bump protobufjs from 8.0.3 to 8.4.0 in /otel-export in the npm_and_yarn group across 1 directory by @​dependabot[bot] in #​911
• build(deps): bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by @​dependabot[bot] in #​910
• build(deps): bump step-security/harden-runner from 2.19.3 to 2.19.4 by @​dependabot[bot] in #​912
• Update Go version from 1.25 to 1.26 by @​cpanato in #​913
• bump gitsign to release v0.16.0 by @​cpanato in #​914

Full Changelog: chainguard-dev/actions@v1.6.19...v1.6.20

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud