.github: bump vmactions/openbsd-vm from 1.4.7 to 1.4.8

[dependabot]

Bumps vmactions/openbsd-vm from 1.4.7 to 1.4.8.

Release notes

Sourced from vmactions/openbsd-vm's releases.

v1.4.8

OpenBSD on ubuntu-26.04 runners

The action's test matrix now runs on ubuntu-26.04 and ubuntu-26.04-arm: 113 of 114 jobs pass, and the 9p job is skipped as before.

What failed on 26.04

With v1.4.7 on a 26.04 runner:

• Every riscv64 job stopped at

  Error: QEMU binary 'qemu-system-riscv64' not found (searched PATH and common install locations).

  Since Ubuntu 25.10 the riscv64 emulator ships in a separate qemu-system-riscv package, no longer in qemu-system-misc.

x86_64, aarch64 and sparc64 were not affected.

Fixes

• The action installs qemu-system-riscv instead of qemu-system-misc for riscv64 on Ubuntu releases newer than 24.04.

The package fix engages only on Ubuntu releases newer than 24.04, so jobs on ubuntu-24.04 run as before. The rest of anyvm 0.7.2's 26.04 work: https://github.com/anyvm-org/anyvm/releases/tag/v0.7.2

Fixed: a lost network probe no longer fails as "Unsupported OS"

vmactions/freebsd-vm#163: a job failed after three minutes with

Error: Unsupported OS: freebsd. Builder repository anyvm-org/freebsd-builder not found.

although the image exists. A single failed probe of the release download URL sent the run down the GitHub REST API. The action never passed a token, so that request was unauthenticated and shared the 60/hour per-IP limit with every other job on the runner IP; the 403 was retried for three minutes and then reported as an unsupported OS. This action took the same path. Two changes close it:

• New input: token. It defaults to github.token and is handed to the VM runtime, so the release lookup is authenticated (1000 requests per hour per repository instead of 60 shared). Nothing to change in

... (truncated)

Commits

• 5f7b2c9 Update vmactions/openbsd-vm from base-vm
• 5119f71 Generated from base-vm
• d22f98e Bump versions from upstream releases
• 37423cc Update vmactions/openbsd-vm from base-vm
• ced3989 Generated from base-vm
• 5ca77d9 Update vmactions/openbsd-vm from base-vm
• 01dd796 Generated from base-vm
• 104bc8f Bump versions from upstream releases
• 8ae27e6 Update vmactions/openbsd-vm from base-vm
• c439765 Generated from base-vm
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)