fix(deps): bump devantler-tech/.github/actions/validate-retired-repo-links from 7.12.3 to 7.17.0

[dependabot]

Bumps devantler-tech/.github/actions/validate-retired-repo-links from 7.12.3 to 7.17.0.

Release notes

Sourced from devantler-tech/.github/actions/validate-retired-repo-links's releases.

v7.17.0

7.17.0 (2026-10-19)

Features

• ci: switch on the world-at-ruin deploy-starter policy for its trial (#623) (21c75c6), closes #202

v7.16.3

7.16.3 (2026-10-19)

Bug Fixes

• ci: read run jobs 50 at a time so the queue evidence read succeeds (#653) (001dc6d)

v7.16.2

7.16.2 (2026-10-18)

Bug Fixes

• ci: use the maintained required Go workflow (#646) (8d2203a)

v7.16.1

7.16.1 (2026-10-18)

Bug Fixes

• gitops: observe the required Go workflow policy (#644) (e038a2e)

v7.16.0

7.16.0 (2026-10-18)

Features

• cleanup: report the read and delete requests a cleanup sent (#642) (e39b2bd)

v7.15.0

7.15.0 (2026-10-18)

Features

• governance: require CodeQL findings on metadata repositories (#640) (bc07d20)

v7.14.0

7.14.0 (2026-10-18)

... (truncated)

Commits

• 21c75c6 feat(ci): switch on the world-at-ruin deploy-starter policy for its trial (#623)
• 0cb40d6 chore(deps): bump actions/create-github-app-token from 3.2.0 to 3.3.0 (#648)
• 001dc6d fix(ci): read run jobs 50 at a time so the queue evidence read succeeds (#653)
• 8f02981 chore(deps): bump ruby/setup-ruby from 1.328.0 to 1.329.0 (#650)
• 4c10bb8 chore(deps): bump devantler-tech/.github/.github/workflows/apply-signed-fixes...
• 86c8348 chore(deps): bump actions/create-github-app-token in /actions/approve-pr (#651)
• 896be1b chore(deps): bump actions/create-github-app-token (#652)
• 8d2203a fix(ci): use the maintained required Go workflow (#646)
• e038a2e fix(gitops): observe the required Go workflow policy (#644)
• e39b2bd feat(cleanup): report the read and delete requests a cleanup sent (#642)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

✅MegaLinter analysis: Success

✅ Linters with no issues

actionlint, bash-exec, git_diff, hadolint, jscpd, jsonlint, lychee, markdown-table-formatter, markdownlint, prettier, prettier, shellcheck, shfmt, stylelint, syft, trivy-sbom, trufflehog, v8r, v8r, yamllint

See detailed reports in MegaLinter artifacts

Show us your support by starring ⭐ the repository

[devantler]

🤖 Generated by the Agentic Engineer

Reviewed validate-retired-repo-links v7.12.3 → v7.17.0 at 5a7921da2523ff6c0aa1b4cc80c77cec5450f99d. No caller adaptation is required.

The complete 19-commit/66-file range changes only this action's go.mod: Go 1.26.8 → 1.26.9. Its implementation, inputs, outputs, defaults, README and nested action pin are unchanged. setup-go reads the action's module file, and KSail runs it in a dedicated Ubuntu job, so the toolchain change stays within that job. The license blob is unchanged.

Every announced release was classified:

• 7.12.4: the Go patch applies automatically; release-tool changes affect other entrypoints.
• 7.12.5: catalogue documentation only; this action does not load it.
• 7.12.6: cleanup performance work affects another entrypoint. This tag has no release object in the published release listing; its commit is included in the source comparison.
• 7.13.0: monorepo labels are outside this action.
• 7.14.0–7.15.0: organization CodeQL observations/rules are outside this action.
• 7.16.0–7.16.3: cleanup telemetry, Go workflow policy/selection and queue-observer pagination are outside this action.
• 7.17.0: the World at Ruin deploy-starter trial is outside this action.

Intervening token, Ruby and reusable-workflow dependency updates are also outside its dependency graph. No newly applicable feature, workaround removal, breaking interface or range-specific migration was identified. Sources: published releases, complete tag comparison, and both pinned action trees plus the target README and license.

Exact-head CI passed. The action job installed Go 1.26.9, completed a two-file scan, required validated=true, and exercised seeded-link rejection plus missing-config refusal. The older checkout used for those refusal controls has the same validator implementation blob as v7.17.0, so those controls exercise the same program under the new toolchain. Required checks passed. Repository automation merged this exact head at 18:56 UTC as 98b236b20cb6684f7bc79152d3021c1f50cd7593; post-merge publication remains pending.