build(deps): Bump the actions-deps group with 3 updates

[dependabot]

Bumps the actions-deps group with 3 updates: lfreleng-actions/github2gerrit-action, actions/upload-artifact and lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml.

Updates lfreleng-actions/github2gerrit-action from 2.4.1 to 2.4.3

Release notes

Sourced from lfreleng-actions/github2gerrit-action's releases.

v2.4.3

🐛 Bug Fixes 🐛

• Fix: Accept indented keys in .gitreview @​ModeSevenIndustrialSolutions (#471)

🔧 Maintenance 🔧

• Chore: Bump lfreleng-actions/harden-runner-block-action from 0.12.1 to 0.12.2 @dependabot[bot] (#465)
• Chore: Bump astral-sh/setup-uv from 10.1.0 to 10.2.0 @dependabot[bot] (#466)
• Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.3.1 to 0.4.0 @dependabot[bot] (#467)
• Chore: Bump ruff from 0.16.8 to 0.16.9 @dependabot[bot] (#468)
• Chore: Bump hatchling from 1.32.3 to 1.32.4 @dependabot[bot] (#469)
• Chore: Pre-commit autoupdate @pre-commit-ci[bot] (#470)

Links

• Submit bugs/feature requests

v2.4.2

🔧 Maintenance 🔧

• Docs: Add repository AGENTS.md stub @​ModeSevenIndustrialSolutions (#463)
• Chore: Bump pyjwt @dependabot[bot] (#464)

Links

• Submit bugs/feature requests

Commits

• f2ffe06 Merge pull request #471 from modeseven-lfreleng-actions/fix/gitreview-indente...
• db4de35 Fix: Accept indented keys in .gitreview
• 91abfe7 Test: Add expected-fail indented .gitreview cases
• 1264059 Merge pull request #470 from lfreleng-actions/pre-commit-ci-update-config
• 8cb068c Fix(deps): Bump mypy to 2.4.0 to match hook rev
• ee29402 Chore: Pre-commit autoupdate
• 63c3e61 Merge pull request #469 from lfreleng-actions/dependabot/uv/hatchling-1.32.4
• 58005de Merge pull request #468 from lfreleng-actions/dependabot/uv/ruff-0.16.9
• 82674d4 Merge pull request #467 from lfreleng-actions/dependabot/github_actions/lfrel...
• 214b1f7 Merge pull request #466 from lfreleng-actions/dependabot/github_actions/astra...
• Additional commits viewable in compare view

Updates actions/upload-artifact from 4.6.2 to 7.0.2

Release notes

Sourced from actions/upload-artifact's releases.

v7.0.2

What's Changed

• Improves artifact download retries when the service returns HTTP 429 (rate limiting), including honoring valid Retry-After headers.
• Updates @​actions/artifact to v6.3.1.

New Contributors

• @​tunc-d made their first contribution in actions/upload-artifact#821

Full Changelog: actions/upload-artifact@v7.0.1...v7.0.2

v7.0.1

What's Changed

• Update the readme with direct upload details by @​danwkennedy in actions/upload-artifact#795
• Readme: bump all the example versions to v7 by @​danwkennedy in actions/upload-artifact#796
• Include changes in typespec/ts-http-runtime 0.3.5 by @​yacaovsnc in actions/upload-artifact#797

Full Changelog: actions/upload-artifact@v7...v7.0.1

v7.0.0

v7 What's new

Direct Uploads

Adds support for uploading single files directly (unzipped). Callers can set the new archive parameter to false to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The name parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.

ESM

To support new versions of the @actions/* packages, we've upgraded the package to ESM.

What's Changed

• Add proxy integration test by @​Link- in actions/upload-artifact#754
• Upgrade the module to ESM and bump dependencies by @​danwkennedy in actions/upload-artifact#762
• Support direct file uploads by @​danwkennedy in actions/upload-artifact#764

New Contributors

• @​Link- made their first contribution in actions/upload-artifact#754

Full Changelog: actions/upload-artifact@v6...v7.0.0

v6.0.0

v6 - What's new

[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (runs.using: node24) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.

Node.js 24

This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.

... (truncated)

Commits

• cf430e0 Merge pull request #822 from actions/tunc-d-prepare-upload-v7-0-2
• c2acded chore: prepare v7.0.2 release
• 4687c1b Merge pull request #821 from actions/tunc-d-upload-artifact-package-bump
• 8cbe1be Bump @​actions/artifact to 6.3.1
• 043fb46 Merge pull request #797 from actions/yacaovsnc/update-dependency
• 634250c Include changes in typespec/ts-http-runtime 0.3.5
• e454baa Readme: bump all the example versions to v7 (#796)
• 74fad66 Update the readme with direct upload details (#795)
• bbbca2d Support direct file uploads (#764)
• 589182c Upgrade the module to ESM and bump dependencies (#762)
• Additional commits viewable in compare view

Updates lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml from 0.9.1 to 0.9.2

Release notes

Sourced from lfreleng-actions/security-workflows/.github/workflows/sonarqube-cloud.yaml's releases.

v0.9.2

🐛 Bug Fixes 🐛

• Fix(scorecard): Hard-code the scan runner label @​ModeSevenIndustrialSolutions (#116)

🎓 Code Quality 🎓

• Test: Assert submodule content reaches both scans @​ModeSevenIndustrialSolutions (#114)

Links

• Submit bugs/feature requests

Commits

• 4da5165 Merge pull request #116 from modeseven-lfreleng-actions/fix/scorecard-publish...
• 81e09a2 Fix(scorecard): Tighten the publish-rule guard
• b050a69 Fix(scorecard): Hard-code the scan runner label
• 34374ce Merge pull request #114 from modeseven-lfreleng-actions/test/submodule-scan-c...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

PR: #34
Mode: squash
Topic: GH-openflowplugin-34
Change-Ids:
I23aa89b98496b196a3107c0bcfd87d2f67f66579
Digest: 4e8b2ace6d41
GitHub-Hash: 375b68a2cea0ec37

Note: This metadata is also included in the Gerrit commit message for reconciliation.

[github-actions]

Change raised in Gerrit by GitHub2Gerrit: https://git.opendaylight.org/gerrit/c/openflowplugin/+/126892

[github-actions]

Automated PR Closure

This pull request has been automatically closed by GitHub2Gerrit.

The corresponding Gerrit change has been accepted and merged ✅

The changes from this PR are now part of the main codebase in Gerrit.

---

This is an automated action performed by the GitHub2Gerrit tool.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml