ci: Bump the ci group in /.github/workflows with 4 updates

[dependabot]

Bumps the ci group in /.github/workflows with 4 updates: docker/setup-buildx-action, commit-check/commit-check-action, vale-cli/vale-action and reviewdog/action-yamllint.

Updates docker/setup-buildx-action from 4.2.0 to 4.3.0

Release notes

Sourced from docker/setup-buildx-action's releases.

v4.3.0

• Bump @​docker/actions-toolkit from 0.92.0 to 0.95.0 in docker/setup-buildx-action#595
• Bump brace-expansion from 1.1.13 to 1.1.18 in docker/setup-buildx-action#600
• Bump js-yaml from 5.2.0 to 5.3.0 in docker/setup-buildx-action#585
• Bump postcss from 8.5.10 to 8.5.25 in docker/setup-buildx-action#598
• Bump undici from 6.27.0 to 6.28.0 in docker/setup-buildx-action#601

Full Changelog: docker/setup-buildx-action@v4.2.0...v4.3.0

Commits

• 37fe631 Merge pull request #595 from docker/dependabot/npm_and_yarn/docker/actions-to...
• b5c4f91 [dependabot skip] chore: update generated content
• 3e93b63 build(deps): bump @​docker/actions-toolkit from 0.92.0 to 0.95.0
• e527031 Merge pull request #600 from docker/dependabot/npm_and_yarn/brace-expansion-1...
• c68814b [dependabot skip] chore: update generated content
• 3f891b0 build(deps): bump brace-expansion from 1.1.13 to 1.1.18
• 787db26 Merge pull request #585 from docker/dependabot/npm_and_yarn/js-yaml-5.2.1
• f779368 [dependabot skip] chore: update generated content
• 7d5e604 build(deps): bump js-yaml from 5.2.0 to 5.3.0
• 292c2fb Merge pull request #590 from docker/dependabot/github_actions/actions/setup-n...
• Additional commits viewable in compare view

Updates commit-check/commit-check-action from 2.11.1 to 2.15.0

Release notes

Sourced from commit-check/commit-check-action's releases.

v2.15.0

What's Changed

👻 Maintenance

• ci: measure test coverage and add Codecov badge by @​shenxianpeng in #267

📦 Dependencies

• chore(deps): bump commit-check from 2.14.0 to 2.15.0 by @dependabot[bot] in #269

Full Changelog: commit-check/commit-check-action@v2.14.0...v2.15.0

v2.14.0

What's Changed

📦 Dependencies

• chore(deps): bump commit-check from 2.13.4 to 2.14.0 by @dependabot[bot] in #265

Full Changelog: commit-check/commit-check-action@v2.13.1...v2.14.0

v2.13.1

What's Changed

🚀 Features

• feat: render a skipped check as skipped, not as a green tick by @​shenxianpeng in #260

📦 Dependencies

• chore(deps): bump commit-check from 2.13.1 to 2.13.4 by @dependabot[bot] in #263

Full Changelog: commit-check/commit-check-action@v2.13.0...v2.13.1

v2.13.0

What's Changed

🚀 Features

• feat: render structured output for step log, job summary, and PR comments by @​shenxianpeng in #251

🐛 Bug fixes

• fix: warn when a PR comment fails to post, and name the right permission by @​shenxianpeng in #254

📝 Documentation

• docs: add commit-check.com link to config header by @​shenxianpeng in #252
• docs: update documentation links to commit-check.com by @​shenxianpeng in #249

... (truncated)

Commits

• f803083 chore(deps): bump commit-check from 2.14.0 to 2.15.0 (#269)
• 81af730 chore: update used-by badge by github-actions[bot] (#264)
• dc04ee4 fix: pass codecov token for uploads to protected main branch (#268)
• 74c6dcb ci: measure test coverage and add Codecov badge (#267)
• 2f0a330 chore(deps): bump commit-check from 2.13.4 to 2.14.0 (#265)
• 562a184 chore(deps): bump commit-check from 2.13.1 to 2.13.4 (#263)
• f0ce432 feat: render a skipped check as skipped, not as a green tick (#260)
• e6270e1 fix: drop the header logo, which read as a second status signal (#262)
• c6dd962 fix: give the report header a logo that survives being small (#261)
• 5957b2f docs: sync the action logo with the new org branding (#259)
• Additional commits viewable in compare view

Updates vale-cli/vale-action from 2.1.2 to 3.0.0

Release notes

Sourced from vale-cli/vale-action's releases.

v3.0.0

Breaking

Nothing was renamed or removed, but several behaviors changed. Each has a way back.

• reviewdog 0.17.0 → 0.21.0. Workflows triggered on push using a github-pr-* reporter previously reported nothing (this is not PullRequest build, exit 0). They now lint, and can fail. Pin reviewdog_version: 0.17.0 to keep the old behavior.
• The level input is honored. It was read from action.yml and never used. Checks that concluded neutral can now conclude failure. Leave level unset for the previous behavior.
• fail_on_error: true fails on errors only. It previously failed on a finding of any severity for every reporter except the check ones, so a lone suggestion ended the run. Use fail_level: any to restore that.
• GitHub's 10-annotation limit no longer fails the job when fail_on_error: false. You get a warning naming how many alerts went unshown.
• Pinning @reviewdog tracks the branch, which is now v3. Pin @v3, or @v2 to stay put.

Added

• Suggested fixes. Alerts that Vale knows how to resolve are posted as suggested changes you can commit from the pull request — the same replacements the language server offers. Requires reporter: github-pr-review.
• macOS, Windows, and ARM runners. The action previously only ran on Linux x86-64.
• New inputs: config, filter, glob, min_alert_level, fail_level, sync, reviewdog_version. workdir is now declared and documented.
• Caching. Binaries go in the runner's tool cache, and sync: false lets you restore a cached StylesPath instead of re-downloading every package each run.
• Downloads are verified against each release's published checksums.

Fixed

• Crash on large output — write EPIPE when reviewdog exited before reading it all (#122)
• An empty files list failing with lstat : no such file or directory (#141)
• Pull requests whose diff exceeds 20,000 lines (#153)
• The annotation limit failing runs regardless of fail_on_error (#89, #150)
• A warning failing the workflow under fail_on_error: true (#84)
• Nothing reported on push events (#103)
• The level input being ignored (#106)
• Wildcards in files — use the glob input; the warning now says so (#123)
• Scheduled runs on runners that write a thin event payload (#69)
• vale_flags splitting on whitespace, which broke --filter='.Level == "error"'
• Vale's own error is reported when it exits with a runtime error, instead of an exit code

Internal

The action now ships as a single bundled dist/index.js; node_modules is no longer committed, taking the repository from 1,035 tracked files to 23. CI fails if the bundle is out of date with the source.

Full Changelog: vale-cli/vale-action@2.1.2...v3.0.0

Commits

• 518a913 Point the README at v3
• dca64de Backtick reviewdog in the README
• 4063152 Add a fail_level input
• 1ef5a5f Move the major tag ourselves, whatever the release is called
• 00a15b5 Treat an empty file list as nothing to lint
• 40967b1 Point wildcard paths at the glob input
• d4af982 Survive reviewdog closing its input early
• febea0f Fail on errors, not on any finding
• b1d1c1f Give reviewdog a repository when the event payload omits one
• 6b637c5 Note what a fork's read-only token can't do
• Additional commits viewable in compare view

Updates reviewdog/action-yamllint from 1.23.0 to 1.23.1

Release notes

Sourced from reviewdog/action-yamllint's releases.

Release v1.23.1

v1.23.1: PR #69 - chore(deps): update python docker tag to v3.14.7

Commits

• de68272 bump v1.23.1
• 6df5851 Merge branch 'master' into releases/v1
• 97a20df chore(deps): update python docker tag to v3.14.7 (#69)
• e6c5d21 chore(deps): update actions/checkout action to v7.0.1 (#68)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions