chore(deps): update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
CodSpeedHQ/action	action	minor	v4.1.1 -> v4.2.1
github/codeql-action	action	patch	v4.30.8 -> v4.30.9
taiki-e/install-action	action	patch	v2.62.28 -> v2.62.33

---

Release Notes

CodSpeedHQ/action (CodSpeedHQ/action)

v4.2.1

Compare Source

Release Notes

What's Changed

🚀 Features

• Use a prime number as frequency to avoid synchronization with periodic tasks by @​adriencaccia
• Pin actions/cache by @​edgarrmondragon in #​143
• Fix action cache by @​adriencaccia in #​144

🐛 Bug Fixes

• Ensure perf is always found on the machine by @​adriencaccia in #​132
• Correctly check if perf is installed by @​adriencaccia

⚙️ Internals

• Add a metadata file in the cache that lists the installed packages by @​adriencaccia
• chore: bump runner version to 4.2.1 by @​adriencaccia in #​145

New Contributors

• @​edgarrmondragon made their first contribution in #​143

Install codspeed-runner 4.2.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/runner/releases/download/v4.2.1/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.2.1

File	Platform	Checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/runner/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Changes

✨ This new release adds a way for the runner to save and restore instruments it installs to a cache directory. The CodSpeed github action automatically makes use of these feature to speedup runs in your CI!

Details

🚀 Features

• chore: bump runner version to 4.2.0 by @​github-actions[bot] in #​142
• feat: cache valgrind installation from runner by @​GuillaumeLagrange in #​140
• Allow caching installed executor instruments on ubuntu/debian by @​GuillaumeLagrange in #​129
• Automatically compress archive if profile folder is above a certain threshold by @​GuillaumeLagrange in #​130

🐛 Bug Fixes

• Bump git2 to latest to support sparse checkout by @​adriencaccia in #​131

⚙️ Internals

• Make fifo command dump trace level by @​GuillaumeLagrange in #​130
• chore: bump runner version to 4.2.0 by @​github-actions[bot] in #​142

Install codspeed-runner 4.2.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/runner/releases/download/v4.2.0/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.2.0

File	Platform	Checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/runner/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.1.1...v4.2.0

github/codeql-action (github/codeql-action)

v4.30.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.30.9 - 17 Oct 2025

• Update default CodeQL bundle version to 2.23.3. #​3205
• Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #​3204

See the full CHANGELOG.md for more information.

taiki-e/install-action (taiki-e/install-action)

v2.62.33

Compare Source

Initial release

---

Configuration

📅 Schedule: Branch creation - "before 9am on monday" in timezone Asia/Shanghai, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[graphite-app]

How to use the Graphite Merge Queue

Add the label merge to this PR to add it to the merge queue.

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has enabled the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.

[codspeed-hq]

CodSpeed Performance Report

Merging #202 will degrade performances by 2.25%

_{Comparing renovate/github-actions (b6ec606) with main (41d2fdc)}

Summary

⚡ 1 improvement
❌ 1 regression
✅ 3 untouched

⚠️ Please fix the performance issues or acknowledge them on CodSpeed.

Benchmarks breakdown

	Benchmark	BASE	HEAD	Change
❌	generate_lookup_table	1.3 µs	1.3 µs	-2.25%
⚡	add_name_add_source_and_content	1.6 µs	1.6 µs	+1.86%