chore(deps): update matt-riley/matt-riley-ci action to v3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
matt-riley/matt-riley-ci	workflow	major	v2.1.0 → v3.0.1

---

Release Notes

matt-riley/matt-riley-ci (matt-riley/matt-riley-ci)

v3.0.1

Compare Source

Bug Fixes

• publish the floating major tag with a token that can (#​100) (495110b)

v3.0.0

Compare Source

⚠ BREAKING CHANGES

• the deploy job requests id-token: write, and a reusable workflow cannot hold a permission its caller has not granted. Every caller must add permissions: id-token: write, including callers that keep passing CLOUDFLARE_API_TOKEN. Callers pinned to @v1 or @v2 are unaffected until they bump.

Features

• add tailscale-acl reusable workflow (#​97) (cb8687d)
• authenticate Cloudflare Pages deploys by OIDC (#​98) (5cb8c0d)

Bug Fixes

• refresh Go caches from trusted main runs (#​95) (be15491)

v3

Compare Source

v2.4.1

Compare Source

Bug Fixes

• release immutable infra artifact handoff (#​91) (328c7bd)

v2.4.0

Compare Source

Features

• Codex/waffle hetzner deployment (#​89) (9b99d0a)
• pass immutable artifacts to infra deploys (3d73ebe)

v2.3.0

Compare Source

Features

• restore go-ci.yml workflow with cache fix (#​80) (071c2c2)

v2.2.0

Compare Source

Changes

• fix: add cache-dependency-path to actions/setup-go in go-security, go-lint, and go-goreleaser workflows
  • Fixes module cache restoration in mono-repo layouts where go.mod is in a subdirectory
  • Resolves warning: Restore cache failed: Dependencies file is not found

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • "before 8am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.