chore: update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/checkout (changelog)	action	digest	9c091bb → 3d3c42e
actions/setup-go	action	minor	v6.4.0 → v6.5.0
actions/setup-node	action	minor	v6.4.0 → v6.5.0
golangci/golangci-lint	uses-with	minor	v2.12.2 → v2.13.1	v2.13.2
golangci/golangci-lint-action	action	minor	v9.2.1 → v9.3.0
pnpm/action-setup	action	patch	v6.0.9 → v6.0.10

---

Release Notes

actions/setup-go (actions/setup-go)

v6.5.0

Compare Source

actions/setup-node (actions/setup-node)

v6.5.0

Compare Source

What's Changed

• Update @​actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @​HarithaVattikuti in #​1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

golangci/golangci-lint (golangci/golangci-lint)

v2.13.1

Compare Source

Released on 2026-08-20

1. Linters bug fixes
   • ginkgolinter: from 0.23.1 to 0.24.0
   • gofmt: from d62b90e to e84e050
   • staticcheck: from 0.8.0-rc.1 to 0.8.0
   • wsl_v5: from 5.8.0 to 5.9.0

v2.13.0

Compare Source

Released on 2026-08-19

1. Enhancements
   • 🎉 go1.27 support
2. Bug fixes
   • fix: cache package facts
3. Linters new features or changes
   • dupword: from 0.1.7 to 0.1.8 (new option skip-raw-strings)
   • errcheck: from 1.10.0 to 1.20.0
   • exhaustruct_v5: from 4.0.0 to 5.0.2 (new configuration)
   • exhaustruct: deprecated and replaced by exhaustruct_v5
   • fatcontext: from 0.9.0 to 0.10.0 (new options: check-loops, check-function-literals)
   • goconst: from 1.10.0 to 1.11.0 (new options: ignore-map-keys, exclude-types)
   • gofumpt: from 0.9.2 to 0.11.0 (new options: extra.group-params, extra.clothe-returns, extra.balance-calls)
   • gomoddirectives: from 0.8.0 to 0.9.0 (new option: replace-allow-all)
   • gosec: from 2.26.1 to 2.27.1
   • govet-modernize: from 0.44.0 to 0.49.0 (fmtappendf is removed. New analyzers atomictypes, embedlit, errorsastype, importcomment, reflecttypeassert, slicesclip, and slicesbackward. waitgroup is renamed waitgroupgo)
   • iface: from 1.4.3 to 1.5.0 (new analyzer: unusedmethod)
   • noinlineerr: from 1.0.5 to 1.0.6
   • nonamedreturns: from 1.0.6 to 1.0.8 (new option: allow-unused-named-returns)
   • recvcheck: from 0.2.0 to 0.3.0 (new default exclusions)
   • unparam: from 5beb8c8 to 3f964bc
4. Linters bug fixes
   • clickhouse-go-linter: from 1.2.0 to 1.2.1
   • errname: from 1.1.1 to 1.1.2
   • exhaustruct: from 5.0.2 to 5.0.3
   • funcorder: add missing Function field
   • ginkgolinter: from 0.23.0 to 0.23.1
   • gocheckcompilerdirectives: from 1.3.0 to 1.4.0
   • gocritic: from 0.14.3 to 0.14.4
   • gomoddirectives: add missing IgnoreForbidden field
   • iface: from 1.4.2 to 1.4.3
   • mirror: from 1.3.0 to 1.3.3
   • nilnil: from 1.1.1 to 1.1.2
   • protogetter: from 0.3.20 to 0.3.21

golangci/golangci-lint-action (golangci/golangci-lint-action)

v9.3.0

Compare Source

What's Changed

Changes

• feat: add no-run-logs-group as experimental option by @​ldez in #​1403

Dependencies

• build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 in the github-actions group by @​dependabot[bot] in #​1395
• build(deps): bump tmp from 0.2.5 to 0.2.6 by @​dependabot[bot] in #​1397
• build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 in the github-actions group by @​dependabot[bot] in #​1398
• build(deps): bump tmp from 0.2.6 to 0.2.7 by @​dependabot[bot] in #​1399
• build(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 by @​dependabot[bot] in #​1400

Full Changelog: golangci/golangci-lint-action@v9.2.1...v9.3.0

pnpm/action-setup (pnpm/action-setup)

v6.0.10

Compare Source

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • "after 5am and before 6am on saturday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.