This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://redirect.github.com/actions/checkout) | action | pinDigest |  → `de0fac2` |
| [actions/setup-go](https://redirect.github.com/actions/setup-go) | action | pinDigest |  → `4b73464` |
| [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | pinDigest |  → `b7c566a` |
| [amannn/action-semantic-pull-request](https://redirect.github.com/amannn/action-semantic-pull-request) | action | pinDigest |  → `48f2562` |
| [errata-ai/vale-action](https://redirect.github.com/errata-ai/vale-action) | action | pinDigest |  → `d89dee9` |
| [golangci/golangci-lint-action](https://redirect.github.com/golangci/golangci-lint-action) | action | pinDigest |  → `1e7e51e` |
| [google-github-actions/release-please-action](https://redirect.github.com/google-github-actions/release-please-action) | action | pinDigest |  → `e4dc86b` |
| [nosborn/github-action-markdown-cli](https://redirect.github.com/nosborn/github-action-markdown-cli) | action | pinDigest |  → `508d6ce` |

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42My4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

…dation (#421)

Replace `pull_request_target` with `pull_request` to reduce attack surface. The semantic PR title action only reads the event payload, so elevated permissions are not needed.

….0 (#422)

This PR contains the following updates:

| Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/cloudquery/plugin-sdk/v4](https://redirect.github.com/cloudquery/plugin-sdk) | `v4.94.7` → `v4.95.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcloudquery%2fplugin-sdk%2fv4/v4.95.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fcloudquery%2fplugin-sdk%2fv4/v4.94.7/v4.95.0?slim=true) |

---

### Release Notes

<details>
<summary>cloudquery/plugin-sdk (github.com/cloudquery/plugin-sdk/v4)</summary>

### [`v4.95.0`](https://redirect.github.com/cloudquery/plugin-sdk/releases/tag/v4.95.0)

[Compare Source](https://redirect.github.com/cloudquery/plugin-sdk/compare/v4.94.7...v4.95.0)

##### Features

- **schema:** Extract `PatternMatchError` typed error from `FilterDfs` ([#&#8203;2458](https://redirect.github.com/cloudquery/plugin-sdk/issues/2458)) ([8b3e522](https://redirect.github.com/cloudquery/plugin-sdk/commit/8b3e522efa5c141e6b5d08c3e6fcb9f8581a6034))

##### Bug Fixes

- **deps:** Update module github.com/cloudquery/codegen to v0.4.0 ([#&#8203;2455](https://redirect.github.com/cloudquery/plugin-sdk/issues/2455)) ([041d331](https://redirect.github.com/cloudquery/plugin-sdk/commit/041d3313dbb6b018a8ba906a5e8c1a4bf5c16118))
- **deps:** Update module github.com/cloudquery/plugin-pb-go to v1.27.11 ([#&#8203;2453](https://redirect.github.com/cloudquery/plugin-sdk/issues/2453)) ([1f94119](https://redirect.github.com/cloudquery/plugin-sdk/commit/1f941193ce694ffaa7c66dcb5e040ce497d30a86))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42My4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIl19-->

Replace GH_CQ_BOT PAT with short-lived tokens from the cloudquery-ci GitHub App.

…426)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/cloudquery/jsonschema](https://redirect.github.com/cloudquery/jsonschema) | replace | digest | `92878fa` → `8dfb902` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42My4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIl19-->

Co-authored-by: cloudquery-ci[bot] <271027272+cloudquery-ci[bot]@users.noreply.github.com>