chore(deps): bump azure/setup-helm from 4 to 5

[dependabot]

Bumps azure/setup-helm from 4 to 5.

Release notes

Sourced from azure/setup-helm's releases.

v5.0.0

Changed

• #259Update Node.js runtime from node20 to node24
• #263Bump undici
• #257Bump undici and @​actions/http-client
• #256Bump minimatch
• #248Bump the actions group with 2 updates
• #247Bump the actions group with 3 updates
• #246Bump @​types/node from 25.0.2 to 25.0.3 in the actions group
• #245Bump the actions group with 3 updates
• #243Bump the actions group with 2 updates
• #240Bump prettier from 3.6.2 to 3.7.3 in the actions group
• #229Bump the actions group across 1 directory with 3 updates
• #231Bump js-yaml from 3.14.1 to 3.14.2
• #234Bump glob from 10.4.5 to 10.5.0
• #225Fix build error
• #222Bump @​types/node from 24.7.2 to 24.8.1 in the actions group
• #220Bump the actions group across 1 directory with 4 updates
• #216Bump the actions group across 1 directory with 4 updates
• #213Bump the actions group with 2 updates
• #211Bump undici
• #212Bump jest from 30.0.5 to 30.1.2 in the actions group
• #210Bump @​types/node from 24.2.1 to 24.3.0 in the actions group

v4.3.1

Changed

• #167Pinning Action Dependencies for Security and Reliability
• #181Fix types, and update node version.
• #191chore(tests): Mock arch to make tests pass on arm host
• #192chore: remove unnecessary prebuild script
• #203Update helm version retrieval to use JSON output for latest version
• #207ci(workflows): update helm version to v3.18.4 and add matrix for tests

Added

• #197Add pre-commit hook

v4.3.0

• #152 feat: log when restoring from cache
• #157 Dependencies Update
• #137 Add dependabot

v4.2.0

• #124 Fix OS detection and download OS-native archive extension

v4.1.0

• #130 switches to use Helm published file to read latest version instead of using GitHub releases

Changelog

Sourced from azure/setup-helm's changelog.

[4.3.0] - 2025-02-15

• #152 feat: log when restoring from cache
• #157 Dependencies Update
• #137 Add dependabot

[4.2.0] - 2024-04-15

• #124 Fix OS detection and download OS-native archive extension

[4.1.0] - 2024-03-01

• #130 switches to use Helm published file to read latest version instead of using GitHub releases

[4.0.0] - 2024-02-12

• #121 update to node20 as node16 is deprecated

Commits

• 9bc31f4 build
• 95ecf49 Bump version to 5.0.1 and update CHANGELOG with recent changes (#287)
• 4180b1c Bump the actions group with 2 updates (#285)
• 6949b7f Bump undici (#284)
• 51ce767 Bump actions/checkout in /.github/workflows in the actions group (#286)
• d6da4f4 Bump the actions group with 5 updates (#283)
• 7e2bc10 Bump actions/checkout in /.github/workflows in the actions group (#280)
• 64d6be9 Bump the actions group with 2 updates (#279)
• 69214f9 fix: use chmod 755 instead of 777 for downloaded helm binary and folder (#278)
• 9dad99f Bump vitest from 4.1.7 to 4.1.8 in the actions group (#277)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[LukasWodka]

👋 Heads-up — Code review queue is at 37 / 30

Above the WIP limit. The team convention is to review existing PRs before opening new work.

Open PRs currently in Code review (oldest first):

• averaging-service#183 — docs: SafeTensors deployment-order & resume-safety runbook (epic feat(auth): logout revokes the token server-side (cli#112) #116) · author: @shujaatTracebloc · reviewer: @saadqbal
• averaging-service#184 — test(weights): shared SafeTensors golden-corpus drift guard + declare safetensors dep (SEC-03) · author: @LukasWodka · no reviewer assigned
• averaging-service#185 — test(weights): average a real SafeTensors edge + a legacy edge in one cycle — SEC-03 §8 · author: @LukasWodka · no reviewer assigned
• backend#1122 — perf(api): cache the anonymous competition-template list (#981 item 4, part 2) · author: @aptracebloc · no reviewer assigned
• backend#1127 — perf(auth): throttle ClientAccessToken last_used_at write (#981) · author: @aptracebloc · no reviewer assigned
• cli#342 — chore(deps): bump actions/setup-python from 5 to 6 · author: @dependabot · no reviewer assigned
• cli#343 — chore(deps): bump actions/download-artifact from 7 to 8 · author: @dependabot · no reviewer assigned
• cli#344 — chore(deps): bump actions/checkout from 4 to 7 · author: @dependabot · no reviewer assigned
• cli#345 — chore(deps): bump actions/setup-go from 5 to 7 · author: @dependabot · no reviewer assigned
• cli#347 — chore: back-merge main → develop after v0.9.3 promote · author: @saadqbal · no reviewer assigned

Pull from review before opening new work. (This is a nudge from the kanban WIP check, not a block.)

[saadqbal]

Superseded by #348, which bundles all 5 action bumps into one PR (avoids a conflict cascade across the shared workflow files) and — critically for #343 — keeps upload-artifact and download-artifact on the same major (v8), so the release artifact merge doesn't break. Closing.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.