chore(deps): update github actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
CodSpeedHQ/action	action	minor	v4.18.5 → v4.19.1
semgrep/semgrep	container	minor	1.171.0 → 1.172.0

---

Release Notes

CodSpeedHQ/action (CodSpeedHQ/action)

v4.19.1

Compare Source

Release Notes

This release ships improvements for the memory instrument.

The memory instrument now lazily attaches to allocators, which lowers the startup time to a few seconds (down from minutes on certain systems). Additionally, we shipped a series of serialization improvements, removing in some large benchmarks 3+ minutes of extra CI time.

🐛 Bug Fixes

• Track successful posix_memalign allocations (#​470) by @​not-matthias in #​470
• Prompt sudo on interactive stdin (#​459) by @​not-matthias in #​459
• Reject empty command before executor setup (#​467) by @​not-matthias in #​467

⚙️ Internals

• chore: bump runner version to 4.19.1 by @​github-actions[bot] in #​225

💼 Other

• Bump the memtrack pin to 1.3.0 by @​adriencaccia in #​474

Install codspeed-runner 4.19.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.19.1/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.19.1

File	Platform	Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.19.0...v4.19.1

v4.19.0

Compare Source

Release Notes

This release adds a new --experimental-exclude-allocations feature to remove allocator time from Simulation benchmarks.

🚀 Features

• Remove eager allocator discovery by @​not-matthias
• Attach allocator probes on demand via exec-mapping watcher by @​not-matthias
• Add exec-mapping watcher BPF prog and inode maps by @​not-matthias
• Add experimental --exclude-allocations setting by @​not-matthias

🐛 Bug Fixes

• Join attach worker thread on drop, not only on finish() by @​not-matthias in #​445
• Fail loud when a watcher mapping is unresolved on a live process by @​not-matthias
• Canonicalize map_files dirent name for low-address mappings by @​not-matthias
• Classify unprefixed jemalloc builds as jemalloc by @​not-matthias
• Fail closed when tracking_enabled lookup fails by @​not-matthias
• Lower zstd compression level to -5 to reduce serialization overhead by @​not-matthias
• Wire MemtrackWriter serializer through BufWriter to fix per-event zstd compression bottleneck by @​not-matthias

💼 Other

• Let the tracker own the poller and drain on shutdown by @​not-matthias
• Return the underlying sink from MemtrackWriter::finish by @​not-matthias

🏗️ Refactor

• Split monolithic eBPF C and Rust into domain files by @​not-matthias
• Split memtrack into module by @​not-matthias
• Attach uprobes at resolved file offsets instead of func_name by @​not-matthias
• Align cycle-estimation flag with experimental naming scheme by @​not-matthias in #​425

📚 Documentation

• Add crate AGENTS.md guide by @​not-matthias in #​455
• Stop hardcoding MCP tool schemas in the optimize skill by @​fargito in #​451

⚡ Performance

• Drain ringbuf bursts eagerly and reserve poller cores by @​not-matthias in #​436
• Grow the event ring buffer to 256 MiB by @​not-matthias
• Wake the ringbuf consumer only past a data watermark by @​not-matthias
• Pre-size and reuse the memtrack encode window buffer by @​not-matthias
• Replace drain/writer threads with the encode pipeline by @​not-matthias
• Add parallel zstd encode pipeline for artifact events by @​not-matthias
• Detach BPF links in parallel at teardown by @​not-matthias in #​440
• Resolve allocator symbol offsets in parallel by @​not-matthias

🧪 Testing

• Add dlopen/on-demand allocator tests + CI matrix by @​not-matthias
• Benchmark encode_events with a realistic allocation trace by @​not-matthias

⚙️ Internals

• chore: bump runner version to 4.19.0 by @​github-actions[bot] in #​224
• Lower on-demand attach log to debug by @​not-matthias in #​462
• Install rust toolchain by explicit channel for older rustup by @​not-matthias
• Also run runner-shared benchmarks in walltime mode by @​not-matthias
• Dedup memtrack build deps into install-bpf-deps action by @​not-matthias

Install codspeed-runner 4.19.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.19.0/codspeed-runner-installer.sh | sh

Download codspeed-runner 4.19.0

File	Platform	Checksum
codspeed-runner-aarch64-apple-darwin.tar.gz	Apple Silicon macOS	checksum
codspeed-runner-aarch64-unknown-linux-musl.tar.gz	ARM64 MUSL Linux	checksum
codspeed-runner-x86_64-unknown-linux-musl.tar.gz	x64 MUSL Linux	checksum

Full Runner Changelog: https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md

Full Changelog: CodSpeedHQ/action@v4.18.5...v4.19.0

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codspeed-hq]

Merging this PR will not alter performance

✅ 14 untouched benchmarks

---

_{Comparing renovate/github-actions (f342b21) with main (dfe3fed)¹}

Footnotes

1. No successful run was found on main (59c3320) during the generation of this report, so dfe3fed was used instead as the comparison base. There might be some changes unrelated to this pull request in this report. ↩