Bump the github-actions group across 1 directory with 2 updates

Bumps the github-actions group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/checkout` from 4 to 5 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v5) Updates `actions/download-artifact` from 4 to 5 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v4...v5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/codeql-analysis.yaml

@@ -24,7 +24,7 @@ jobs:
 
  runs-on: ubuntu-24.04
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
  - uses: actions/setup-go@v5
  with: { go-version: stable }
 

.github/workflows/govulncheck.yaml

@@ -20,7 +20,7 @@ jobs:
 
  runs-on: ubuntu-24.04
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
 
  # Install Go and produce a SARIF report. This fails only when the tool is
  # unable to scan.

.github/workflows/lint.yaml

@@ -15,7 +15,7 @@ jobs:
  contents: read
  checks: write
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
  - uses: actions/setup-go@v5
  with: { go-version: stable }
 

.github/workflows/test.yaml

@@ -15,7 +15,7 @@ jobs:
  go-test:
  runs-on: ubuntu-24.04
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
  - uses: actions/setup-go@v5
  with: { go-version: stable }
 
@@ -33,7 +33,7 @@ jobs:
  matrix:
  kubernetes: ['default']
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
  - uses: actions/setup-go@v5
  with: { go-version: stable }
 
@@ -60,7 +60,7 @@ jobs:
  matrix:
  kubernetes: [v1.33, v1.28]
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
  - uses: actions/setup-go@v5
  with: { go-version: stable }
 
@@ -94,7 +94,7 @@ jobs:
  matrix:
  kubernetes: [v1.33, v1.28]
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
  - uses: actions/setup-go@v5
  with: { go-version: stable }
 
@@ -174,10 +174,10 @@ jobs:
  - kubernetes-api
  - kubernetes-k3d
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
  - uses: actions/setup-go@v5
  with: { go-version: stable }
- - uses: actions/download-artifact@v4
+ - uses: actions/download-artifact@v5
  with: { path: download }
 
  # Combine the coverage profiles by taking the mode line from any one file

.github/workflows/trivy.yaml

@@ -25,7 +25,7 @@ jobs:
 
  runs-on: ubuntu-24.04
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
  - name: Download Trivy
  uses: ./.github/actions/trivy
  env:
@@ -45,7 +45,7 @@ jobs:
 
  runs-on: ubuntu-24.04
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
 
  # Trivy needs a populated Go module cache to detect Go module licenses.
  - uses: actions/setup-go@v5
@@ -71,7 +71,7 @@ jobs:
 
  runs-on: ubuntu-24.04
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
 
  # Report success only when detected secrets are listed in [.trivyignore.yaml].
  - name: Scan secrets
@@ -93,7 +93,7 @@ jobs:
 
  runs-on: ubuntu-24.04
  steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@v5
 
  # Print any detected secrets or vulnerabilities to the workflow log for
  # human consumption. This step fails only when Trivy is unable to scan.