chore(deps): update koki-develop/github-actions-lint action to v1.5.0

[renovate]

Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.

This PR contains the following updates:

Package	Type	Update	Change
koki-develop/github-actions-lint	action	minor	v1.4.1 -> v1.5.0

---

Release Notes

koki-develop/github-actions-lint (koki-develop/github-actions-lint)

v1.5.0

Compare Source

Features

• deps: update ghcr.io/koki-develop/github-actions-lint/ghalint docker tag to v0.2.0 (#​62) (7b8d4fb)
• deps: update ghcr.io/koki-develop/github-actions-lint/zizmor docker tag to v0.3.0 (#​63) (55fa6c1)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

• Dependency Updates: Updated two internal Docker images (ghalint to v0.2.0, zizmor to v0.3.0)
• CI Improvements: Added name attributes to workflow jobs and improved configuration
• Documentation: Added CLAUDE.md repository guidance document
• No Breaking Changes: All changes are backward compatible with existing configurations
• No Security Fixes: No explicit security vulnerabilities addressed in this release

🎯 Impact Scope Investigation

• Usage Locations: github-actions-lint is used exclusively in .github/workflows/github-actions-lint.yml:30,42,56
• Three Sub-Actions Used:
  • actionlint - GitHub Actions workflow linting
  • ghalint - GitHub Actions configuration analysis
  • zizmor - Security auditing for GitHub Actions
• Configuration Impact: Current workflow configuration remains fully compatible
• No Dependencies on Other Components: This action operates independently and doesn't affect other workflow dependencies
• Existing Zizmor Ignore Comment: Found existing zizmor: ignore[use-trusted-publishing] comment in release-please.yml:53 which remains valid

💡 Recommended Actions

• Immediate Merge: This update can be safely merged without any manual intervention
• No Code Changes Required: All existing configurations and parameters are maintained
• No Testing Required: The changes are purely internal dependency updates that don't affect the public API
• Monitor Future Runs: Standard practice to watch the next few workflow runs to ensure continued functionality

🔗 Reference Links

• Release Notes v1.5.0
• Full Changelog v1.4.1...v1.5.0

Generated by koki-develop/claude-renovate-review