Roll back GitHub actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
SonarSource/gh-action_cache	action	rollback	v1 → v1.2.3
SonarSource/vault-action-wrapper	action	minor	3.2.0 → 3.3.0
jdx/mise-action	action	patch	v3.6.1 → v3.6.3

---

Release Notes

SonarSource/vault-action-wrapper (SonarSource/vault-action-wrapper)

v3.3.0

Compare Source

What's Changed

• PREQ-4481: Diagnose which secret path causes 403 Forbidden failures by @​tomverin in #​71

Full Changelog: SonarSource/vault-action-wrapper@3.2.0...3.3.0

jdx/mise-action (jdx/mise-action)

v3.6.3

Compare Source

What's Changed

• fix: pass cwd to all exec calls in exportMiseEnv() by @​andrewthauer in #​390
• chore: release v3.6.3 by @​mise-en-dev in #​391

New Contributors

• @​andrewthauer made their first contribution in #​390

Full Changelog: jdx/mise-action@v3.6.2...v3.6.3

v3.6.2

Compare Source

What's Changed

• chore(deps): update dependency prettier to v3.8.1 by @​renovate[bot] in #​368
• chore(deps): update dependency @​types/node to v24.10.9 by @​renovate[bot] in #​367
• chore(deps): update github/codeql-action digest to 439137e by @​renovate[bot] in #​370
• chore(deps): lock file maintenance by @​renovate[bot] in #​372
• chore(deps): update autofix-ci/action digest to 7a166d7 by @​renovate[bot] in #​375
• chore(deps): update actions/checkout digest to de0fac2 by @​renovate[bot] in #​374
• chore(deps): lock file maintenance by @​renovate[bot] in #​377
• chore(deps): update github/codeql-action digest to b5ebac6 by @​renovate[bot] in #​378
• chore(deps): update dependency @​types/node to v24.10.13 by @​renovate[bot] in #​379
• chore(deps): update github/codeql-action digest to f5c2471 by @​renovate[bot] in #​380
• fix: move file_hash to end of cache key template to prevent prefix matching by @​altendky in #​384
• chore(deps): update dependency @​types/handlebars to v4.1.0 by @​renovate[bot] in #​381
• chore(deps): lock file maintenance by @​renovate[bot] in #​386
• chore(deps): update github/codeql-action digest to 4558047 by @​renovate[bot] in #​387
• chore(deps): lock file maintenance by @​renovate[bot] in #​389
• chore: release v3.6.2 by @​mise-en-dev in #​385

New Contributors

• @​altendky made their first contribution in #​384

Full Changelog: jdx/mise-action@v3.6.1...v3.6.2

---

Configuration

📅 Schedule: Branch creation - "after 7am every weekday,before 8pm every weekday" in timezone Europe/Paris, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hashicorp-vault-sonar-prod]

Renovate Jira issue ID: BUILD-10465

[sonarqubecloud]

SonarQube reviewer guide

Summary: Update GitHub Actions dependencies to newer versions across workflows and action configurations.

Review Focus: Verify that the upgraded versions (vault-action-wrapper 3.2.0→3.3.0, mise-action v3.6.1→v3.6.3, gh-action_cache v1→v1.2.3) are compatible with existing implementations and don't introduce breaking changes. Pay special attention to any behavioral changes in the vault-action-wrapper patch that might affect secret retrieval.

Start review at: build-maven/action.yml. This is a critical build action that depends on multiple upgraded dependencies (vault-action-wrapper), making it essential to ensure secrets are properly retrieved and that the Maven build pipeline remains functional after the updates.

💬 Please send your feedback

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 Dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud