chore(deps): update weekly update

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
benchmark-action/github-action-benchmark	action	patch	v1.20.4 -> v1.20.7
codecov/codecov-action	action	patch	v5.5.0 -> v5.5.1
github/codeql-action	action	minor	v3.29.11 -> v3.30.1
graalvm/setup-graalvm	action	patch	v1.3.5 -> v1.3.6
ubuntu	container	digest	7c06e91 -> 9cbed75

---

Release Notes

benchmark-action/github-action-benchmark (benchmark-action/github-action-benchmark)

v1.20.7

Compare Source

• fix improve parsing for custom benchmarks (#​323)

v1.20.5

Compare Source

• feat allow to parse generic cargo bench/criterion units (#​280)
• fix add summary even when failure threshold is surpassed (#​285)
• fix time units are not normalized (#​318)

codecov/codecov-action (codecov/codecov-action)

v5.5.1

Compare Source

What's Changed

• fix: overwrite pr number on fork by @​thomasrockhu-codecov in #​1871
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @​app/dependabot in #​1868
• build(deps): bump github/codeql-action from 3.29.9 to 3.29.11 by @​app/dependabot in #​1867
• fix: update to use local app/ dir by @​thomasrockhu-codecov in #​1872
• docs: fix typo in README by @​datalater in #​1866
• Document a codecov-cli version reference example by @​webknjaz in #​1774
• build(deps): bump github/codeql-action from 3.28.18 to 3.29.9 by @​app/dependabot in #​1861
• build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.2 by @​app/dependabot in #​1833

Full Changelog: https://github.com/codecov/codecov-action/compare/v5.5.0..v5.5.1

github/codeql-action (github/codeql-action)

v3.30.1

Compare Source

v3.30.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.0 - 01 Sep 2025

• Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #​3054

See the full CHANGELOG.md for more information.

graalvm/setup-graalvm (graalvm/setup-graalvm)

v1.3.6

Compare Source

What's Changed

• Bump the npm-development group with 6 updates by @​dependabot[bot] in #​174
• Bump jest and @​types/jest by @​dependabot[bot] in #​175
• Bump @​actions/cache from 4.0.3 to 4.0.5 in the npm-production group by @​dependabot[bot] in #​178

Full Changelog: graalvm/setup-graalvm@v1.3.5...v1.3.6

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.01%. Comparing base (00a60f8) to head (f118fce).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main    #7646   +/-   ##
=========================================
  Coverage     90.01%   90.01%           
  Complexity     7090     7090           
=========================================
  Files           803      803           
  Lines         21443    21443           
  Branches       2092     2092           
=========================================
  Hits          19301    19301           
  Misses         1477     1477           
  Partials        665      665           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.