chore(deps): update wetransform/gha-workflows action to v4.6.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
wetransform/gha-workflows	action	minor	v4.3.1 → v4.6.0

---

Release Notes

wetransform/gha-workflows (wetransform/gha-workflows)

v4.6.0

Compare Source

Bug Fixes

• deps: update actions/create-github-app-token action to v1.11.1 (852e666)
• deps: update actions/create-github-app-token action to v1.11.5 (368af87)
• deps: update actions/create-github-app-token action to v1.11.6 (cbe2cea)
• deps: update actions/upload-artifact action to v4.6.0 (dd904f9)
• deps: update all non-major dependencies (433f5e5)
• deps: update all non-major dependencies (8e8f1e6)
• deps: update all non-major dependencies (9e79329)
• deps: update all non-major dependencies (61856ff)
• deps: update all non-major dependencies (c1196ae)
• deps: update docker/build-push-action action to v6.11.0 (ed5b02f)
• deps: update docker/build-push-action action to v6.13.0 (0773125)
• deps: update docker/login-action action to v3.4.0 (134722e)
• deps: update mikepenz/action-junit-report action to v5.5.0 (640e4d6)

v4.5.0

Compare Source

Features

• gradle: support private submodules (b25037a)

Bug Fixes

• deps: update actions/setup-java action to v4.5.0 (7d4f56b)
• deps: update all non-major dependencies (4b90a85)

v4.4.0

Compare Source

Features

• upload HTML test reports as artifact in mise workflow (8bef91e)

Bug Fixes

• deps: update all non-major dependencies (cc4f5e1)
• deps: update all non-major dependencies (f201699)
• deps: update semantic-release monorepo (f72ff87)
• deps: update wetransform/gha-trivy action to v3 (9eb8ddb)
• expand configured report path globs without word splitting (20c3381)
• publish JUnit test report also when mise task fails (c722407)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Vulnerability summary (docker.io/wetransform/hale-cli:latest) — latest: run #604

Critical	High	Medium	Low	Unknown
0	2	27	19	0

Change since last run: no change
Risk≥40: 2 (=)

Grype (risk-based)

⚠️ 2 at/above risk threshold 40

Critical	High	Medium	Low	Negligible	Unknown
2	2	123	52	9	0

Top by risk

Vulnerability	Package	Sev	Risk	EPSS	KEV
GHSA-xm6r-4466-mr74	orientdb-core 1.5.1	Critical	68.7	0.73
GHSA-xm6r-4466-mr74	orientdb-core 1.5.1	Critical	68.7	0.73
GHSA-j288-q9x7-2f5v	commons-lang 2.6	Medium	1.2	0.02
GHSA-j288-q9x7-2f5v	commons-lang 2.6	Medium	1.2	0.02
CVE-2023-31486	perl-base 5.34.0-3ubuntu1.7	Medium	0.9	0.02
GHSA-w33c-445m-f8w7	okio 1.6.0	Medium	0.7	0.01
GHSA-w33c-445m-f8w7	okio 1.6.0	Medium	0.7	0.01
CVE-2025-59375	libexpat1 2.4.7-1ubuntu0.7	Medium	0.6	0.01
CVE-2021-31879	wget 1.21.2-2ubuntu1.4	Medium	0.6	0.01
GHSA-pvp8-3xj6-8c6x	commons-configuration 1.6	Low	0.5	0.02

Links: workflow run · HTML report · SBOM · Grype report

[github-actions]

Vulnerability summary (fs) — latest: run #604

Critical	High	Medium	Low	Unknown
0	0	0	0	0

Change since last run: Critical 0 (=) · High 0 (-1) · Medium 0 (-4) · Low 0 (-1) · Unknown 0 (=)
Risk≥40: 0 (-1)

Grype (risk-based)

✅ 0 at/above risk threshold 40

Critical	High	Medium	Low	Negligible	Unknown
0	0	0	0	0	0

Top by risk

No vulnerabilities found.

Links: workflow run · HTML report · SBOM · Grype report

Previous runs (1)

run #607 · 2026-08-13T14:16:13.841Z

Critical	High	Medium	Low	Unknown
0	1	4	1	0

Risk≥40: 1