Merge branch 'main' into renovate/pin-dependencies

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [azure/k8s-lint](https://github.com/azure/k8s-lint) | action | major | `v3.0.1` → `v4.0.0` |

---

### Release Notes

<details>
<summary>azure/k8s-lint (azure/k8s-lint)</summary>

### [`v4.0.0`](https://github.com/Azure/k8s-lint/releases/tag/v4.0.0)

[Compare Source](https://github.com/azure/k8s-lint/compare/v3.0.1...v4.0.0)

##### Changed

- [#&#8203;189](https://github.com/azure/k8s-lint/issues/189) [Update Node.js runtime from node20 to node24](https://github.com/Azure/k8s-lint/pull/189)
- [#&#8203;198](https://github.com/azure/k8s-lint/issues/198) [build: migrate action to ESM with esbuild and Vitest](https://github.com/Azure/k8s-lint/pull/198)
- **Dependabot - GitHub Actions workflow updates:** bumps to `github/codeql-action`, `actions/setup-node`, and other workflow actions in [#&#8203;145](https://github.com/azure/k8s-lint/issues/145), [#&#8203;147](https://github.com/azure/k8s-lint/issues/147), [#&#8203;148](https://github.com/azure/k8s-lint/issues/148), [#&#8203;150](https://github.com/azure/k8s-lint/issues/150), [#&#8203;152](https://github.com/azure/k8s-lint/issues/152), [#&#8203;156](https://github.com/azure/k8s-lint/issues/156), [#&#8203;158](https://github.com/azure/k8s-lint/issues/158), [#&#8203;160](https://github.com/azure/k8s-lint/issues/160), [#&#8203;167](https://github.com/azure/k8s-lint/issues/167), [#&#8203;169](https://github.com/azure/k8s-lint/issues/169), [#&#8203;171](https://github.com/azure/k8s-lint/issues/171), [#&#8203;173](https://github.com/azure/k8s-lint/issues/173), [#&#8203;175](https://github.com/azure/k8s-lint/issues/175), [#&#8203;177](https://github.com/azure/k8s-lint/issues/177), [#&#8203;179](https://github.com/azure/k8s-lint/issues/179), [#&#8203;181](https://github.com/azure/k8s-lint/issues/181), [#&#8203;183](https://github.com/azure/k8s-lint/issues/183), [#&#8203;185](https://github.com/azure/k8s-lint/issues/185), [#&#8203;187](https://github.com/azure/k8s-lint/issues/187), [#&#8203;188](https://github.com/azure/k8s-lint/issues/188), [#&#8203;193](https://github.com/azure/k8s-lint/issues/193), [#&#8203;197](https://github.com/azure/k8s-lint/issues/197)
- **Dependabot - npm dependency updates:** `@types/node` ([#&#8203;144](https://github.com/azure/k8s-lint/issues/144), [#&#8203;146](https://github.com/azure/k8s-lint/issues/146), [#&#8203;159](https://github.com/azure/k8s-lint/issues/159), [#&#8203;166](https://github.com/azure/k8s-lint/issues/166), [#&#8203;174](https://github.com/azure/k8s-lint/issues/174)), `undici` / `@actions/http-client` ([#&#8203;184](https://github.com/azure/k8s-lint/issues/184), [#&#8203;191](https://github.com/azure/k8s-lint/issues/191)), `jest` ([#&#8203;149](https://github.com/azure/k8s-lint/issues/149)), `handlebars` ([#&#8203;196](https://github.com/azure/k8s-lint/issues/196)), `picomatch` ([#&#8203;195](https://github.com/azure/k8s-lint/issues/195)), `minimatch` ([#&#8203;186](https://github.com/azure/k8s-lint/issues/186)), `js-yaml` ([#&#8203;163](https://github.com/azure/k8s-lint/issues/163)), `glob` ([#&#8203;165](https://github.com/azure/k8s-lint/issues/165)), and grouped npm `actions` updates in [#&#8203;151](https://github.com/azure/k8s-lint/issues/151), [#&#8203;155](https://github.com/azure/k8s-lint/issues/155), [#&#8203;157](https://github.com/azure/k8s-lint/issues/157), [#&#8203;164](https://github.com/azure/k8s-lint/issues/164), [#&#8203;168](https://github.com/azure/k8s-lint/issues/168), [#&#8203;170](https://github.com/azure/k8s-lint/issues/170), [#&#8203;172](https://github.com/azure/k8s-lint/issues/172), [#&#8203;176](https://github.com/azure/k8s-lint/issues/176), [#&#8203;178](https://github.com/azure/k8s-lint/issues/178)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41LjQiLCJ1cGRhdGVkSW5WZXIiOiI0My41LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImFjdGlvbiIsImRlcHMiXX0=-->

Reviewed-on: https://gitea.t000-n.de/t.behrendt/k_deploy_workflows/pulls/54
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>

.gitea/workflows/deploy.yaml

@@ -64,7 +64,7 @@ jobs:
     if: inputs.skip_shared_secrets_deployment != 'true'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
@@ -74,7 +74,7 @@ jobs:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Set restic backup secret
-        uses: azure/k8s-create-secret@6e0ba8047235646753f2a3a3b359b4d0006ff218 # v5.0.1
+        uses: azure/k8s-create-secret@5e49ad902ac755e0815974a44904c728da961747 # v6.0.0
         with:
           namespace: ${{ steps.namespace.outputs.namespace }}
           secret-name: backupsidecar-secret
@@ -93,7 +93,7 @@ jobs:
     if: needs.detect-service-type.outputs.has_k8s == 'true'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
@@ -119,7 +119,7 @@ jobs:
       inputs.skip_helm_deployment != 'true'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}

.gitea/workflows/release.yaml

@@ -23,6 +23,6 @@ jobs:
         with:
           token: ${{ secrets.GITEA_TOKEN }}
       - name: Push tag
-        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@47a1c635cfc76cfb4eeee3db0d0b89bf19007c7a # 0.2.3
+        uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@38c1bbd8bad3e7965744d03de85faa4a5b808d1b # 0.2.4
         with:
           tag: ${{ steps.tag.outputs.new-tag }}

.gitea/workflows/validate.yaml

@@ -59,7 +59,7 @@ jobs:
     if: needs.detect-service-type.outputs.has_k8s == 'true'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}
@@ -69,7 +69,7 @@ jobs:
           method: kubeconfig
           kubeconfig: ${{ secrets.KUBECONFIG }}
       - name: Validate k8s manifests
-        uses: azure/k8s-lint@6aefe5066f95e73d2b140d8835cc95583b886989 # v3.0.1
+        uses: azure/k8s-lint@e4234c50ea835112e72b145bdecd00a94bad42fd # v4.0.0
         with:
           namespace: ${{ steps.namespace.outputs.namespace }}
           lintType: dryrun
@@ -84,7 +84,7 @@ jobs:
       inputs.skip_helm_validation != 'true'
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@0.0.1
+      - uses: https://gitea.t000-n.de/t.behrendt/k_deploy_actions/.gitea/actions/extract-namespace-from-repo-name@244a64884838c35a5fc0dc42e0b82bb70b253dfc # 0.0.1
         id: namespace
         with:
           repo: ${{ github.repository }}