Update fossas/fossa-action action to v2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
fossas/fossa-action	action	major	v1 → v2

---

Release Notes

fossas/fossa-action (fossas/fossa-action)

v2.0.0

Compare Source

Breaking change: Node 24 runtime

This action now runs on the Node 24 GitHub Actions runtime (previously Node 20), via #​277.

• GitHub-hosted runners: no action needed.
• Self-hosted runners: you must be on a runner version that bundles the Node 24 runtime. Update your runner if you pin fossas/fossa-action@v2.

The @v1 line is unchanged and stays on Node 20, so existing @v1 users are not affected until they opt into @v2. #​277 is the only change that touches the action's runtime code (dist/) — everything else below is CI or dev-tooling only.

Everything in v1.9.0 → v2.0.0

Action runtime

• Upgrade to Node.js 24 and Yarn 4 (Corepack, packageManager: yarn@4.13.0, engines.node >= 24.0.0) — #​277

CI / repo tooling (no effect on consumers)

• Fix the repo's fossa test --diff CI step to work with push events (first push to a new branch falls back to diffing the default branch) — #​278
• Make dependabot ignore major-version bumps of @types/node — #​291

Dev-dependency bumps (no effect on consumers)

• eslint 9.39.4 → 10.2.0 → 10.2.1 — #​288, #​297
• @​typescript-eslint/eslint-plugin 8.58.0 → 8.58.2 — #​290, #​295
• @​types/node 24.12.0 → 24.12.2 — #​293
• globals 17.4.0 → 17.5.0 — #​294
• @​eslint/compat 2.0.3 → 2.0.4 — #​287

Full changelog: fossas/fossa-action@v1.9.0...v2.0.0

v2

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud