ci(deps): carry licence rows forward for bumped action pins

[github-actions]

Opened by sbom-actions-currency.

sbom-check refuses an action pin with no row in mise-tasks/sbom-actions.tsv, and Renovate cannot write that table — so every action bump opens red and holds the prConcurrentLimit: 1 slot (CLOUD-1213).

Each row here is the same repository's existing row with only the sha changed. It was carried forward only after every candidate licence file was confirmed byte-identical between the mapped commit and the new one, so the judgement already recorded still describes those exact bytes. Nothing was re-derived.

A pin whose licence files differ, or whose repository has no row at all, is not here — it is reported as a warning in the run log for a person to read.

Refs: CLOUD-1213

DO-NOT-CLOSE CLOUD-1213

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Advanced

Run ID: 677d876b-cedf-4f95-bd3d-b8d319639701

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}