chore(deps): bump redhat-actions/try-in-web-ide from 1.4 to 2

[dependabot]

Bumps redhat-actions/try-in-web-ide from 1.4 to 2.

Release notes

Sourced from redhat-actions/try-in-web-ide's releases.

v1.5.0

What's Changed

Node.js runtime upgrade

• Upgraded action runtime from node16 to node24 (node16 is EOL and deprecated by GitHub Actions)

CI improvements

• Pinned all GitHub Actions to SHA digests for supply chain security
• Replaced defunct CRDA vulnerability scan with npm audit
• Added TypeScript compile check (tsc --noEmit) to CI
• Added integration test workflow that runs the action on PRs

Dependencies

• Modernized all dependencies (@actions/core, @actions/github, inversify, etc.)
• Fixed code issues flagged by updated linters

Full Changelog: redhat-actions/try-in-web-ide@v1.4.2...v1.5.0

Try to update earliest matching comment

v1.4.2

• Try to update earliest matching comment

Allow detecting and updating existing badge comments made by bots other than the github-actions bot

v1.4.1

• Allow detecting and updating existing badge comments made by bots other than the github-actions bot

Changelog

Sourced from redhat-actions/try-in-web-ide's changelog.

try-in-web-ide Changelog

v2.0.0

Breaking Changes

• Node 24 runtime — action now runs on node24 (previously node16/node20)

Dependencies

• Upgraded TypeScript 5.8 → 6.0.3
• Upgraded ESLint 8 (EOL) → 10 with flat config migration
• Upgraded Jest 29 → 30
• Upgraded @types/node ^20 → ^26, fs-extra ^10 → ^11
• Fixed high-severity brace-expansion DoS vulnerability (GHSA-mh99-v99m-4gvg)

CI & Security

• Hardened all workflows with least-privilege permissions blocks
• Upgraded runners to ubuntu-24.04
• Upgraded actions/checkout to v7, actions/setup-node to v7
• Replaced archived markdown-link-check with lychee-action
• Added concurrency groups to cancel redundant runs
• Added Dependabot version updates for npm and GitHub Actions
• Enabled secret scanning and push protection
• Set default workflow permissions to read-only
• Added SECURITY.md

Docs

• Added devfile.yaml, VS Code extensions config, and CONTRIBUTING.md (#39)
• Fixed outdated references in CONTRIBUTING.md

v1.4.2

• Try to update earliest matching comment

v1.4.1

• Allow detecting and updating existing badge comments made by bots other than the github-actions bot

Commits

• 5cd0cae docs: add v2.0.0 changelog
• 4ff51f5 docs: fix outdated references and improve package metadata (#51)
• ed50ab9 ci: replace archived markdown-link-check with lychee (#56)
• ba1fe4a chore(deps-dev): Bump @​types/node from 22.20.1 to 26.1.2 (#55)
• 685cc98 security: add SECURITY.md, dependabot config, and enable secret scanning (#52)
• 606df59 fix(ci): add issues:write permission to integration test (#53)
• d31de5d ci: harden workflows with least-privilege permissions and modernize runners (...
• df09c92 chore: upgrade EOL dependencies and modernize tooling (#49)
• 8fb24b9 Add devfile.yaml, .vscode/extensions.json, CONTRIBUTING.md (#39)
• 6d64b67 ci: add typecheck job and integration test workflow (#48)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)