chore(deps): update ferrlabs/.github digest to 5ff5438

[ferrlabs-renovate]

This PR contains the following updates:

Package	Type	Update	Change
FerrLabs/.github (changelog)	workflow	digest	2ea7662 → 5ff5438

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

SonarQube — aucune nouvelle issue

_{Comparaison entre le projet bac à sable de cette PR et la branche par défaut : SonarQube Community n'analyse pas les PR, ce delta est calculé côté CI. Détail}

[ferrfleet]

Uneventful: digest-only bump of FerrLabs/.github reusable workflows (2ea7662 → 15286b3), same job/input shape across all five callers. All 19 checks green.

[ferrfleet]

Follow-up: PR was rebased to a newer digest since my last approval (2ea7662 → 15286b3), now 2ea7662 → fba6f4b. Re-checked what's new in that range for FerrLabs/.github:

• #327 (docker RUN descriptor limit) — already covered by the prior approval.
• #330 (github actions bump) — only touches reusable-ci-rust.yml, reusable-release-rust.yml, reusable-ferrflow-release.yml (dtolnay/rust-toolchain digest bump, gated behind hashFiles('**/Cargo.toml') != ''), renovate.yml, workflow-templates/ci-rust.yml. This repo is Go-only, no Cargo.toml, so that step never runs here.
• #334 (concurrency group disambiguation) — touches reusable-ci-node.yml and reusable-sonarqube-scan.yml. This repo's reusable-ci-go.yml call pins its internal sonar call to a separate fixed digest (2883414f...), unrelated to this bump, so no effect.

Nothing in the new range touches reusable-ci-go.yml, reusable-pr-title.yml, reusable-renovate-dispatch.yml, or reusable-security-scan.yml beyond the pin itself. All 19 checks green. Still uneventful.

[ferrfleet]

Follow-up: digest moved again since my last approval (fba6f4b → 84f4447). Two new commits in range:

• #331 bumps the pinned FerrLabs/FerrFlow action inside reusable-ferrflow-release.yml to v7.20.1. This repo's release.yml only passes dry-run and has no Cargo.toml, so it exercises the same job path as before, just a newer action pin.
• #335 (pnpm-version follows packageManager) only touches reusable-ci-astro.yml and reusable-ci-node.yml, neither used here.

Nothing in the new range touches the five workflows this repo calls beyond the pin bump itself. All 19 checks green. Still uneventful.

[ferrfleet]

Follow-up: digest moved again since my last approval (84f4447 → 5ff5438). Four new commits in FerrLabs/.github in that range:

• #338 sccache fix — touches setup-sccache/action.yml and reusable-ci-rust.yml only. This repo is Go-only, doesn't call the rust reusable, no effect.
• #337 FerrFlow action bump (v7.20.1 → v7.21.1) inside reusable-ferrflow-release.yml — pin-only change, same shape as previous approvals. release.yml here only passes dry-run, same job path.
• #336 github actions bump — the only line touching a workflow this repo calls is a codeql-action/upload-sarif pin bump in reusable-security-scan.yml (5 occurrences, all pin-only). The rest of that commit (renovate.yml, reusable-docker-build.yml, scorecard.yml) isn't used here.
• #332 pnpm v12 — touches ci-astro.yml/ci-node.yml templates only, not used here.

No input/output/behavior change to any of the five workflows this repo calls. Checks: mostly green; CI/Build, SonarQube analysis and kind smoke test were still in progress at review time with no failures reported. Still uneventful.