Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
docker/build-push-action	action	minor	v6.3.0 -> v6.7.0
docker/login-action	action	minor	v3.2.0 -> v3.3.0
docker/setup-buildx-action	action	minor	v3.4.0 -> v3.6.1
ruff (source, changelog)	dev	patch	0.6.4 -> 0.6.5
sigstore/cosign-installer	action	minor	v3.5.0 -> v3.6.0
starlette-prometheus	http	minor	^0.9.0 -> ^0.10.0
strawberry-graphql (source, changelog)	dev	patch	0.240.3 -> 0.240.4
strawberry-graphql (source, changelog)	http	patch	0.240.3 -> 0.240.4

---

Release Notes

docker/build-push-action (docker/build-push-action)

v6.7.0

Compare Source

v6.6.1

Compare Source

• Bump @​docker/actions-toolkit from 0.37.0 to 0.37.1 in https://github.com/docker/build-push-action/pull/1205

Full Changelog: docker/build-push-action@v6.6.0...v6.6.1

v6.6.0

Compare Source

v6.5.0

Compare Source

v6.4.1

Compare Source

v6.4.0

Compare Source

• Set repository and ghtoken attributes for GitHub Actions cache backend by @​crazy-max in https://github.com/docker/build-push-action/pull/1133
• Bump @​docker/actions-toolkit from 0.31.0 to 0.33.0 in https://github.com/docker/build-push-action/pull/1179

Full Changelog: docker/build-push-action@v6.3.0...v6.4.0

docker/login-action (docker/login-action)

v3.3.0

Compare Source

• Bump @​docker/actions-toolkit from 0.24.0 to 0.35.0 in https://github.com/docker/login-action/pull/754
• Bump https-proxy-agent from 7.0.4 to 7.0.5 in https://github.com/docker/login-action/pull/741
• Bump braces from 3.0.2 to 3.0.3 in https://github.com/docker/login-action/pull/730

Full Changelog: docker/login-action@v3.2.0...v3.3.0

docker/setup-buildx-action (docker/setup-buildx-action)

v3.6.1

Compare Source

• Check for malformed docker context by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/347

Full Changelog: docker/setup-buildx-action@v3.6.0...v3.6.1

v3.6.0

Compare Source

• Create temp docker context if default one has TLS data loaded before creating a container builder by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/341

Full Changelog: docker/setup-buildx-action@v3.5.0...v3.6.0

v3.5.0

Compare Source

astral-sh/ruff (ruff)

v0.6.5

Preview features

• [pydoclint] Ignore DOC201 when function name is "new" (#​13300)
• [refurb] Implement slice-to-remove-prefix-or-suffix (FURB188) (#​13256)

Rule changes

• [eradicate] Ignore script-comments with multiple end-tags (ERA001) (#​13283)
• [pyflakes] Improve error message for UndefinedName when a builtin was added in a newer version than specified in Ruff config (F821) (#​13293)

Server

• Add support for extensionless Python files for server (#​13326)
• Fix configuration inheritance for configurations specified in the LSP settings (#​13285)

Bug fixes

• [ruff] Handle unary operators in decimal-from-float-literal (RUF032) (#​13275)

CLI

• Only include rules with diagnostics in SARIF metadata (#​13268)

Playground

• Add "Copy as pyproject.toml/ruff.toml" and "Paste from TOML" (#​13328)
• Fix errors not shown for restored snippet on page load (#​13262)

sigstore/cosign-installer (sigstore/cosign-installer)

v3.6.0

Compare Source

What's Changed

• Bump actions/checkout from 4.1.2 to 4.1.3 by @​dependabot in https://github.com/sigstore/cosign-installer/pull/161
• Bump actions/checkout from 4.1.3 to 4.1.4 by @​dependabot in https://github.com/sigstore/cosign-installer/pull/162
• Bump actions/setup-go from 5.0.0 to 5.0.1 by @​dependabot in https://github.com/sigstore/cosign-installer/pull/163
• Bump actions/checkout from 4.1.4 to 4.1.5 by @​dependabot in https://github.com/sigstore/cosign-installer/pull/164
• Bump actions/checkout from 4.1.5 to 4.1.6 by @​dependabot in https://github.com/sigstore/cosign-installer/pull/165
• Bump actions/checkout from 4.1.6 to 4.1.7 by @​dependabot in https://github.com/sigstore/cosign-installer/pull/166
• Bump actions/setup-go from 5.0.1 to 5.0.2 by @​dependabot in https://github.com/sigstore/cosign-installer/pull/167
• pin public key used for verification by @​bobcallaway in https://github.com/sigstore/cosign-installer/pull/169
• bump default version to v2.4.0 release by @​bobcallaway in https://github.com/sigstore/cosign-installer/pull/168
• update readme for new release by @​bobcallaway in https://github.com/sigstore/cosign-installer/pull/170

Full Changelog: sigstore/cosign-installer@v3...v3.6.0

PeRDy/starlette-prometheus (starlette-prometheus)

v0.10.0

✨ New Features

• 5269e1b Upgrade dependencies and fix make

strawberry-graphql/strawberry (strawberry-graphql)

v0.240.4

Compare Source

This release fixes how we check for multipart subscriptions to be
in line with the latest changes in the spec.

Contributed by Patrick Arminio via PR #​3627

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[qlty-cloud-legacy]

Code Climate has analyzed commit d756d7b and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (100% is the threshold).

This pull request will bring the total coverage in the repository to 100.0% (0.0% change).

View more on Code Climate.