chore(deps): update github actions

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v6.0.2 → v6.0.3
actions/checkout (changelog)	action	digest	8e8c483 → df4cb1c
lycheeverse/lychee-action	action	minor	v2.7.0 → v2.9.0

---

Release Notes

actions/checkout (actions/checkout)

v6.0.3

Compare Source

• Fix checkout init for SHA-256 repositories by @​yaananth in #​2439
• fix: expand merge commit SHA regex and add SHA-256 test cases by @​yaananth in #​2414

lycheeverse/lychee-action (lycheeverse/lychee-action)

v2.9.0

Compare Source

Summary

This release updates the default lychee version from v0.23.0 to v0.24.2.

The main reason for this release is compatibility with the new lychee 0.24.x release artifacts. Starting with lychee v0.24.0, the archive layout changed, and the lychee binary may now be packaged inside a subdirectory. lychee-action now detects that layout automatically, so users can upgrade without changing their workflows.

If you use:

uses: lycheeverse/lychee-action@v2

you will get the new version once the floating v2 tag has been updated. If you pin exact versions, update to:

uses: lycheeverse/lychee-action@v2.9.0

What’s new from lychee v0.24.x

Better diagnostics

lychee now reports line and column numbers for detected links. This makes broken link reports easier to act on, especially in larger documentation sites or generated reports.

Text fragment checking

lychee can now check URL text fragments, such as links containing #:~:text=.... This helps catch links that point to a valid page but no longer points to the intended highlighted text.

Sitemap support

lychee can now read sitemap.xml inputs. This is useful for checking published websites or generated documentation sites where the sitemap is the easiest source of URLs to validate.

JUnit output

lychee now supports JUnit output. This makes it easier to integrate link checking results with CI systems and test reporting tools that understand JUnit XML.

Redirect and remap visibility

lychee can now show redirects and remaps more clearly. This helps explain why a URL was checked as a different final URL and makes debugging link-checking behavior easier.

Multiple config files

lychee now supports multiple configuration files and expanded config handling. This is useful for repositories that split documentation, website, or package-specific link-checking settings.

Timeout handling

lychee can now accept timeouts explicitly. This gives users more control over how strict their link checks should be for flaky or slow endpoints.

Fixes and reliability improvements

Fixed lychee 0.24.x archive compatibility

lychee-action now handles the new lychee release archive layout by detecting whether the lychee binary is inside a subdirectory.

This fixes compatibility with lychee 0.24.x.

More stable installation path

The action now installs lychee into $RUNNER_TEMP/lychee/bin instead of $HOME.

This avoids failures on runners where $HOME differs between composite action steps. In those environments, the action could add one directory to PATH but install the binary somewhere else, causing lychee: command not found.

Safer automatic lychee version updates

The workflow that checks for new lychee releases now guards against null release versions before creating update PRs. This prevents invalid automated PRs such as “Update lycheeVersion to null”.

Dependency updates

• Updated actions/checkout from v6 to v7
• Updated actions/cache from v5 to v6

Upstream lychee changelog

For the full lychee changelog, see:

• https://github.com/lycheeverse/lychee/releases/tag/lychee-v0.24.0
• https://github.com/lycheeverse/lychee/releases/tag/lychee-v0.24.1
• https://github.com/lycheeverse/lychee/releases/tag/lychee-v0.24.2

What’s Changed

• bump default to 0.24.1 and auto-detect lychee bin in subfolder by @​kaitlyndotmoe in #​330
• fixes #​322 check for null by @​bgermann in #​336
• Install into $RUNNER_TEMP instead of $HOME by @​mre in #​338
• Bump actions/checkout from 6 to 7 by @​dependabot in #​339
• Bump actions/cache from 5 to 6 by @​dependabot in #​340

Full Changelog: lycheeverse/lychee-action@v2.8.0...v2.9.0

v2.8.0

Compare Source

What's Changed

• Update lycheeVersion to v0.23.0 by @​github-actions[bot] in #​324
• Update args for lychee-action to use root-dir by @​mre in #​314
• Update test to use --root-dir instead of the deprecated --base by @​mre in #​315
• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​316
• Bump actions/cache from 4 to 5 by @​dependabot[bot] in #​319
• Bump peter-evans/create-pull-request from 7 to 8 by @​dependabot[bot] in #​318
• Add message with Summary report URL by @​atteggiani in #​326

New Contributors

• @​atteggiani made their first contribution in #​326

Full Changelog: lycheeverse/lychee-action@v2.7.0...v2.8.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.