Update terraform-linters/setup-tflint action to v6.3.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
terraform-linters/setup-tflint	action	minor	v6.2.2 → v6.3.0

---

Release Notes

terraform-linters/setup-tflint (terraform-linters/setup-tflint)

v6.3.0

Compare Source

What's Changed

Features

• Add tflint_version_file input to read the TFLint version from a file by @​somaz94 in #​448

Dependencies

• build(deps-dev): Bump flatted from 3.3.1 to 3.4.2 by @​dependabot[bot] in #​415
• build(deps): Bump fast-xml-parser from 5.5.5 to 5.5.7 by @​dependabot[bot] in #​416
• build(deps): Bump picomatch by @​dependabot[bot] in #​417
• build(deps-dev): Bump @​eslint/compat from 2.0.0 to 2.0.3 by @​dependabot[bot] in #​419
• build(deps-dev): Bump eslint-plugin-security from 3.0.1 to 4.0.0 by @​dependabot[bot] in #​421
• build(deps): Bump actions/cache from 5.0.3 to 5.0.4 by @​dependabot[bot] in #​423
• build(deps): Bump brace-expansion by @​dependabot[bot] in #​424
• build(deps-dev): Bump the eslint group across 1 directory with 3 updates by @​dependabot[bot] in #​430
• build(deps-dev): Bump eslint-plugin-jsdoc from 62.8.0 to 62.8.1 in the eslint group by @​dependabot[bot] in #​431
• build(deps-dev): Bump the eslint group with 3 updates by @​dependabot[bot] in #​435
• build(deps-dev): Bump globals from 17.4.0 to 17.5.0 by @​dependabot[bot] in #​436
• build(deps-dev): Bump prettier from 3.8.1 to 3.8.3 by @​dependabot[bot] in #​437
• build(deps): Bump actions/cache from 5.0.4 to 5.0.5 by @​dependabot[bot] in #​438
• build(deps): Bump actions/setup-node from 6.3.0 to 6.4.0 by @​dependabot[bot] in #​439
• build(deps-dev): Bump the eslint group with 2 updates by @​dependabot[bot] in #​442
• build(deps-dev): Bump jest from 30.3.0 to 30.4.2 by @​dependabot[bot] in #​443
• build(deps): Bump the actions group across 1 directory with 3 updates by @​dependabot[bot] in #​441
• build(deps): Bump fast-xml-builder from 1.1.4 to 1.2.0 by @​dependabot[bot] in #​440
• build(deps): Bump fast-xml-parser from 5.5.7 to 5.7.1 by @​dependabot[bot] in #​433
• dependabot: Set cooldown period by @​wata727 in #​418
• Remove @​babel/eslint-parser by @​bendrucker in #​425
• dependabot: Group eslint packages by @​bendrucker in #​426
• Replace eslint-plugin-import with eslint-plugin-import-x by @​bendrucker in #​428
• Remove eslint-plugin-promise by @​bendrucker in #​429

Chores

• ci: exclude dist from CodeQL analysis by @​bendrucker in #​412
• Extract release-target and installer modules with tests by @​bendrucker in #​444
• Consolidate plugin cache into a single module by @​bendrucker in #​445
• Name the wrapper hand-off protocol in a shared module by @​bendrucker in #​446

New Contributors

• @​somaz94 made their first contribution in #​448

Full Changelog: terraform-linters/setup-tflint@v6...v6.3.0

v6.3

Compare Source

---

Configuration

📅 Schedule: (in timezone America/Los_Angeles)

• Branch creation
  • "before 8am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

Claude finished @renovate[bot]'s task in 18s —— View job

---

PR Review

Reviewed the single-line change bumping terraform-linters/setup-tflint from v6.2.2 → v6.3.0 in .github/workflows/validate.yml.

Assessment: ✅ Looks good — safe to merge.

• Minor version bump, backward compatible. The only new feature (tflint_version_file input, #448) is opt-in and unused here; the rest are dependency/CI internal changes.
• No changes needed to the existing with.github-token usage.
• No security, performance, or test-coverage concerns for this change.

Minor observation (not blocking, pre-existing): the workflow pins actions by tag (@v6.3.0, @v4.0.1) rather than by commit SHA. Tag pinning is fine and consistent with the rest of the repo, but if you ever want stricter supply-chain guarantees, SHA pinning is the hardened alternative. No action required for this PR.