feat: update dataaxiom/ghcr-cleanup-action to v1.2.2 #minor

[public-glueops-renovatebot]

This PR contains the following updates:

Package	Type	Update	Change
dataaxiom/ghcr-cleanup-action	action	minor	v1.0.16 → v1.2.2

---

Release Notes

dataaxiom/ghcr-cleanup-action (dataaxiom/ghcr-cleanup-action)

v1.2.2

Compare Source

• feature: skip-regex-checks input bypasses regex length/ReDoS guards for intentionally large patterns (fix #​128)

v1.2.1

Compare Source

• fix: tolerate every 404 on package version delete (was: fail on the second) (fix #​121)
• fix: eliminate spurious "wasn't found" warnings from cosign signature dual-cascade race
• fix: per-image log buffer flushes audit trail even when a cascade errors mid-flight

v1.2.0

Compare Source

• feature: cross-run manifest cache; warm runs only fetch newly-published manifests (hit rate logged)
• perf: parallel API throughout — package pagination, manifest fetches, untag PUTs, child/referrer deletes
• perf: batched untagging — one reload per batch instead of one per tag
• perf: push token reuse across untag PUTs + 429/secondary rate-limit retries on registry auth
• fix: repository input is now informational; cleanup uses owner + package directly (supports unlinked / cross-account packages)
• log volume cap at 1000 lines per group (info); per-image log output buffered to avoid interleaving under concurrent deletes
• package version upgrades

v1.1.0

Compare Source

• fix: preserve OCI 1.1 subject-bearing referrers (cosign sigstore-bundles, attestations) during cleanup — were silently deleted as untagged #​71
• fix: keep-n-tagged now gates untag operations; a matched tag is not stripped from an image that keep-n-tagged would protect (#​99, #​101)
• fix: shared multi-arch platform digests no longer cascade-deleted when one of multiple parent indexes is removed (#​91)
• fix: delete-partial-images excludes fully ghost images #​112
• fix: Octokit error output visible at all log levels (was suppressed when log-level was error or warn)
• fix: expand-packages rejects fine-grained PATs upfront with a clear message
• fix: setFailed message no longer overwritten by an empty Error in early-failure paths
• feat: ReDoS guard on user-supplied regex (delete-tags, exclude-tags, package) when use-regex: true
• feat: code refactor/split, removal of anys where possible using typed classes
• chore(deps): Node.js 24
• docs: README rewrite + Limitations section (5,000-download undeletable policy, nested-manifest non-support)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.