chore: update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending	Age	Confidence
actions/setup-go	action	major	v6.5.0 → v7.0.0
github.com/VictoriaMetrics/metricsql	require	patch	v0.87.2 → v0.87.3
github/codeql-action	action	minor	v4.36.3 → v4.37.1	v4.37.3 (+1)
golang.org/x/term	require	minor	v0.44.0 → v0.45.0
golang.org/x/text	require	minor	v0.39.0 → v0.40.0
step-security/harden-runner	action	minor	v2.19.4 → v2.20.0
step-security/setup-uv	action	minor	v8.1.0 → v8.3.2

---

Release Notes

actions/setup-go (actions/setup-go)

v7.0.0

Compare Source

What's Changed

• Migrate to ESM and upgrade dependencies by @​priyagupta108 in #​763
• chore(deps): bump @​actions/cache to 6.2.0 by @​philip-gai in #​771

New Contributors

• @​philip-gai made their first contribution in #​771

Full Changelog: actions/setup-go@v6...v7.0.0

v7

Compare Source

VictoriaMetrics/metricsql (github.com/VictoriaMetrics/metricsql)

v0.87.3

Compare Source

github/codeql-action (github/codeql-action)

v4.37.1

Compare Source

• Upcoming breaking change: Add a deprecation warning for customers using CodeQL version 2.20.6 and earlier. These versions of CodeQL were discontinued on 1 July 2026 alongside GitHub Enterprise Server 3.16, and will be unsupported by the next minor release of the CodeQL Action. #​3956
• Update default CodeQL bundle version to 2.26.1. #​4019

v4.37.0

Compare Source

• Update default CodeQL bundle version to 2.26.0. #​3995
• In addition to the existing input format, the config-file input for the codeql-action/init step will soon support a new [owner/]repo[@​ref][:path] format. All components except the repository name are optional. If omitted, owner defaults to the same owner as the repository the analysis is running for, ref to main, and path to .github/codeql-action.yaml. Support for this format ships in this version of the CodeQL Action, but will only be enabled over the coming weeks. #​3973

step-security/harden-runner (step-security/harden-runner)

v2.20.0

Compare Source

What's Changed

• Support for block policy for MacOS and Windows GitHub-hosted runners
• Support for Bitrise MacOS GitHub Actions runners
• HTTPS monitoring support for Bun for Linux runners (enterprise tier)

Full Changelog: step-security/harden-runner@v2.19.4...v2.20.0

step-security/setup-uv (step-security/setup-uv)

v8.3.2

Compare Source

What's Changed

• chore: Cherry-picked changes from upstream by @​anurag-stepsecurity in #​104
• fix: Resolve security vulnerabilities by @​anurag-stepsecurity in #​107

New Contributors

• @​anurag-stepsecurity made their first contribution in #​104

Full Changelog: step-security/setup-uv@v8...v8.3.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 4am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.