chore(deps): update all ci non-major dependencies

[open-turo-bot]

This PR contains the following updates:

Package	Type	Update	Change
alessandrojcm/commitlint-pre-commit-hook	repository	minor	v9.19.0 -> v9.20.0
pre-commit/mirrors-eslint	repository	minor	v9.16.0 -> v9.17.0
rhysd/actionlint	repository	patch	v1.7.4 -> v1.7.6

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

alessandrojcm/commitlint-pre-commit-hook (alessandrojcm/commitlint-pre-commit-hook)

v9.20.0

Compare Source

Features

• bump the commitlint group with 2 updates (4a3054c)

pre-commit/mirrors-eslint (pre-commit/mirrors-eslint)

v9.17.0

Compare Source

rhysd/actionlint (rhysd/actionlint)

v1.7.6

Compare Source

• Using contexts at specific workflow keys is incorrectly reported as not allowed. Affected workflow keys are as follows. (#​495, #​497, #​498, #​500)
  • jobs.<job_id>.steps.with.args
  • jobs.<job_id>.steps.with.entrypoint
  • jobs.<job_id>.services.<service_id>.env
• Update Go dependencies to the latest.

[Changes][v1.7.6]

v1.7.5

Compare Source

• Strictly check available contexts in ${{ }} placeholders following the 'Context availability' table in the official document.
  • For example, jobs.<job_id>.defaults.run.shell allows env context but shell workflow keys in other places allow no context.

    defaults:
      run:

ERROR: No context is available here

    shell: ${{ env.SHELL }}

jobs:
  test:
    runs-on: ubuntu-latest
    defaults:
      run:

OK: 'env' context is available here

        shell: ${{ env.SHELL }}
    steps:
      - run: echo hello

ERROR: No context is available here

        shell: ${{ env.SHELL}}
```

• Check a string literal passed to fromJSON() call. This pattern is popular to create array or object constants because GitHub Actions does not provide the literal syntax for them. See the document for more details. (#​464)

  jobs:
    test:

ERROR: Key 'mac' does not exist in the object returned by the fromJSON()

  runs-on: ${{ fromJSON('{"win":"windows-latest","linux":"ubuntul-latest"}')['mac'] }}
  steps:
    - run: echo This is a special branch!

ERROR: Broken JSON string passed to fromJSON.

      if: contains(fromJSON('["main","release","dev"'), github.ref_name)

- Allow passing command arguments to `-shellcheck` argument. ([#​483](https://redirect.github.com/rhysd/actionlint/issues/483), thanks [@​anuraaga](https://redirect.github.com/anuraaga))
- This is useful when you want to use alternative build of shellcheck like [go-shellcheck](https://redirect.github.com/wasilibs/go-shellcheck/).
  ```sh
  actionlint -shellcheck="go run github.com/wasilibs/go-shellcheck/cmd/shellcheck@latest"
  ```
- Support undocumented `repository_visibility`, `artifact_cache_size_limit`, `step_summary`, `output`, `state` properties in `github` context. ([#​489](https://redirect.github.com/rhysd/actionlint/issues/489), thanks [@​rasa](https://redirect.github.com/rasa) for adding `repository_visibility` property)
- Remove `macos-12` runner label from known labels because it was [dropped](https://redirect.github.com/actions/runner-images/issues/10721) from GitHub-hosted runners on Dec. 3 and is no longer available.
- Add `windows-2025` runner label to the known labels. The runner is in [public preview](https://github.blog/changelog/2024-12-19-windows-server-2025-is-now-in-public-preview/). ([#​491](https://redirect.github.com/rhysd/actionlint/issues/491), thanks [@​ericcornelissen](https://redirect.github.com/ericcornelissen))
- Add `black` to the list of colors for `branding.color` action metadata. ([#​485](https://redirect.github.com/rhysd/actionlint/issues/485), thanks [@​eifinger](https://redirect.github.com/eifinger))
- Add `table` to the list of icons for `branding.icon` action metadata.
- Fix parsing escaped `{` in `format()` function call's first argument.
- Fix the incorrect `join()` function overload. `join(s1: string, s2: string)` was wrongly accepted.
- Update popular actions data set to the latest.
- Add `download-artifact/v3-node20` to the data set. ([#​468](https://redirect.github.com/rhysd/actionlint/issues/468))
- Fix missing the `reviewdog/action-hadolint@v1` action input. ([#​487](https://redirect.github.com/rhysd/actionlint/issues/487), thanks [@​mi-wada](https://redirect.github.com/mi-wada))
- Link to the documents of the stable version in actionlint `man` page and `-help` output.
- Refactor `LintStdin()` API example and some unit tests. ([#​472](https://redirect.github.com/rhysd/actionlint/issues/472), [#​475](https://redirect.github.com/rhysd/actionlint/issues/475), thanks [@​alexandear](https://redirect.github.com/alexandear))
- Improve the configuration example in `actionlint.yaml` document to explain glob patterns for `paths`. ([#​481](https://redirect.github.com/rhysd/actionlint/issues/481))

[Changes][v1.7.5]

<a id="v1.7.4"></a>

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

Release notes preview

No new release will be created.

If you are expecting a release, you will need to either fix a bug or add a feature.
Chores, CI, docs, refactoring, style and other changes will not trigger a release.