chore(deps): update koki-develop/github-actions-lint action to v1.6.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
koki-develop/github-actions-lint	action	minor	v1.5.0 → v1.6.0

---

Release Notes

koki-develop/github-actions-lint (koki-develop/github-actions-lint)

v1.6.0

Compare Source

Features

• deps: update ghcr.io/koki-develop/github-actions-lint/zizmor docker tag to v0.4.0 (#​72) (c1d3dc2)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

• Dependency Update: Primary change is updating the zizmor Docker tag from an older version to v0.4.0
• Infrastructure Updates: Updated various GitHub Actions dependencies (docker/login-action, actions/checkout, Alpine base image)
• Documentation: Added workflow permissions documentation for better clarity
• No Breaking Changes: No API modifications, input parameter changes, or behavioral modifications affecting user interface
• Security: No specific security fixes mentioned, but dependency updates generally improve security posture

🎯 Impact Scope Investigation

• Usage Locations: The action is used in exactly 3 places within .github/workflows/github-actions-lint.yml:30,42,56
  • actionlint job for GitHub Actions syntax checking
  • ghalint job for GitHub Actions security linting
  • zizmor job for security auditing with github-token and persona: auditor
• Configuration Compatibility: All existing input parameters (action-path, github-token, persona) remain unchanged and compatible
• No Other Dependencies: This is an isolated GitHub Actions workflow change with no impact on the main codebase or build process

💡 Recommended Actions

• Immediate Merge: This PR can be safely merged without any manual intervention
• No Code Changes Required: The update maintains full backward compatibility with existing configurations
• Monitoring: After merge, verify that the GitHub Actions lint workflow continues to function as expected on the next PR or commit
• Automatic Processing: Renovate's automerge feature can handle this update safely

🔗 Reference Links

• Release Notes v1.6.0
• Zizmor v0.4.0 Release
• Compare v1.5.0...v1.6.0

Generated by koki-develop/claude-renovate-review