Update jlumbroso/free-disk-space action to v1.3.2 (main)

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
jlumbroso/free-disk-space	action	patch	v1.3.1 → v1.3.2

---

Release Notes

jlumbroso/free-disk-space (jlumbroso/free-disk-space)

v1.3.2: — security fix and the decision records

Compare Source

Fixes the template-injection pattern in input handling (#​51, by @​nbuckwalt).

Also adds docs/adr/ — the reasoning behind this action: why it exists, what it inherited from apache/flink and ShubhamTatvamasi, what it deliberately does not do, and what is still open.

No behaviour changes. The swap-storage default change ships in the next release.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: facf536f-88f4-4586-88be-856cc08133f1

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[fullsend-ai-review]

Risk Assessment: moderate (2/5)

Details

Routine bot-authored action version bump (1 file, 2 lines) in a high-churn, multi-author CI workflow file; CI_WORKFLOW_CHANGED elevates Tier 1 but small change size, bot authorship, and absence of recent regressions keep the composite moderate.

[fullsend-ai-review]

Review

Routine Renovate SHA-pin bump of jlumbroso/free-disk-space from v1.3.1 to v1.3.2 in .github/workflows/release.yaml (single-line change; the new SHA 3f13feab2962a87273d379ebc36ea159527e6cc9 was verified as the v1.3.2 tag commit). Upstream release notes describe a security fix (template-injection pattern in input handling) with no behavior changes.

Findings

Info

• [protected-path] .github/workflows/release.yaml — Change touches a governance path (.github/). Renovate is authorized to update GitHub Actions here via renovate.json at the repo root (which extends github>conforma/.github//config/renovate/renovate.json), so this is expected. Human approval is still required for protected-path changes.
• [scope-authorization-implicit] N/A — Authorization inferred from the mechanical nature of the change (value-only / digest bump). No architectural review required.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag	Coverage Δ
acceptance	54.51% <ø> (ø)
generative	12.25% <ø> (ø)
integration	23.56% <ø> (ø)
unit	72.24% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.