Bumps [chainguard-dev/actions](https://github.com/chainguard-dev/actions) from 1.5.1 to 1.5.2.
- [Release notes](https://github.com/chainguard-dev/actions/releases)
- [Changelog](https://github.com/chainguard-dev/actions/blob/main/.goreleaser.yml)
- [Commits](de56c27...8e97c1f)

---
updated-dependencies:
- dependency-name: chainguard-dev/actions
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [octo-sts/action](https://github.com/octo-sts/action) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/octo-sts/action/releases)
- [Commits](octo-sts/action@e480437...a26b0c6)

---
updated-dependencies:
- dependency-name: octo-sts/action
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* setup-melange - better determining of release version.

The previous version of this code would output over 11,000 lines
(and growing) to stderr in a user of this action.  This is much
more direct.

* Update action.yaml

* apt-faster - replace apt as well as apt-get

There are some changes to the wrapper script. The big one
really is just to identify 'full-upgrade' as a "install" operation.

* shellcheck - appease reviewdog

I'm not sure if it will allow the shellcheck disable or not.
It gets confused on 'is never invoked' because those functions
are invoked via the callers of 't()'.

* setup-melange - use ubuntu bwrap package.

The bwrap package in 24.04 is 0.9.0.  It has --clearenv,
and is what I have been using for the past year.

* setup-melange - make bwrap work on ubuntu with user namespaces.