chore(deps): update davidanson/markdownlint-cli2-action action to v23

.gitea/workflows/artifacthub-metadata.yaml

@@ -11,12 +11,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v6.0.3
-    - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
+    - uses: docker/login-action@v4.2.0
       with:
         registry: ${{ github.server_url }}
         username: ${{ github.repository_owner }}
         password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
-    - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
+    - uses: docker/login-action@v4.2.0
       with:
         username: ${{ secrets.DOCKER_IO_USERNAME }}
         password: ${{ secrets.DOCKER_IO_PASSWORD }}

.gitea/workflows/golang-linters.yaml

@@ -21,9 +21,9 @@ jobs:
         os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
     steps:
     - uses: actions/checkout@v6.0.3
-    - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+    - uses: actions/setup-go@v6.4.0
       with:
         go-version: ${{ matrix.go }}
-    - uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0
+    - uses: golangci/golangci-lint-action@v9.2.1
       with:
         version: v2.12.2 # renovate: datasource=github-releases depName=golangci/golangci-lint

.gitea/workflows/golang-tests.yaml

@@ -34,7 +34,7 @@ jobs:
         os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
     steps:
     - uses: actions/checkout@v6.0.3
-    - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+    - uses: actions/setup-go@v6.4.0
       with:
         go-version: ${{ matrix.go }}
     - env:

.gitea/workflows/markdown-linters.yaml

@@ -14,6 +14,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v6.0.3
-    - uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0
+    - uses: DavidAnson/markdownlint-cli2-action@v23.2.0
       with:
         globs: '**/*.md'

.gitea/workflows/release.yaml

@@ -19,7 +19,7 @@ jobs:
       run: apt-get update && apt-get install --yes curl
     - name: Install syft
       env:
-        SYFT_VERSION: "1.46.0" # renovate: datasource=github-releases depName=anchore/syft
+        SYFT_VERSION: "1.45.0" # renovate: datasource=github-releases depName=anchore/syft
       run: |
         OS="$(uname | tr '[:upper:]' '[:lower:]')"
         ARCH="$(dpkg --print-architecture)"
@@ -33,15 +33,15 @@ jobs:
         rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
     - uses: volker-raschek/cosign-installer@v4.1.2-rc3
       with:
-        cosign-release: "v3.1.1" # renovate: datasource=github-tags depName=sigstore/cosign
-    - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
+        cosign-release: "v3.0.6" # renovate: datasource=github-tags depName=sigstore/cosign
+    - uses: docker/setup-qemu-action@v4.1.0
       with:
         image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
-    - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
-    - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
+    - uses: docker/setup-buildx-action@v4.1.0
+    - uses: actions/setup-go@v6.4.0
       with:
         go-version: stable
-    - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
+    - uses: docker/login-action@v4.2.0
       with:
         registry: git.cryptic.systems
         username: ${{ github.repository_owner }}
@@ -52,9 +52,9 @@ jobs:
         GITEA_TOKEN: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
         GONOSUMDB: ${{ vars.GONOSUMDB }}
         GOPROXY: ${{ vars.GOPROXY }}
-      uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
+      uses: goreleaser/goreleaser-action@v7.2.2
       with:
-        version: v2.17.0 # renovate: datasource=github-releases depName=goreleaser/goreleaser
+        version: v2.16.0 # renovate: datasource=github-releases depName=goreleaser/goreleaser
         args: release --clean
 
   sync-to-hub-docker-io: