chore(deps): bump fossas/fossa-action from 1.9.0 to 2.0.0

[dependabot]

Bumps fossas/fossa-action from 1.9.0 to 2.0.0.

Release notes

Sourced from fossas/fossa-action's releases.

v2.0.0

Breaking change: Node 24 runtime

This action now runs on the Node 24 GitHub Actions runtime (previously Node 20), via #277.

• GitHub-hosted runners: no action needed.
• Self-hosted runners: you must be on a runner version that bundles the Node 24 runtime. Update your runner if you pin fossas/fossa-action@v2.

The @v1 line is unchanged and stays on Node 20, so existing @v1 users are not affected until they opt into @v2. #277 is the only change that touches the action's runtime code (dist/) — everything else below is CI or dev-tooling only.

Everything in v1.9.0 → v2.0.0

Action runtime

• Upgrade to Node.js 24 and Yarn 4 (Corepack, packageManager: yarn@4.13.0, engines.node >= 24.0.0) — #277

CI / repo tooling (no effect on consumers)

• Fix the repo's fossa test --diff CI step to work with push events (first push to a new branch falls back to diffing the default branch) — #278
• Make dependabot ignore major-version bumps of @types/node — #291

Dev-dependency bumps (no effect on consumers)

• eslint 9.39.4 → 10.2.0 → 10.2.1 — #288, #297
• @​typescript-eslint/eslint-plugin 8.58.0 → 8.58.2 — #290, #295
• @​types/node 24.12.0 → 24.12.2 — #293
• globals 17.4.0 → 17.5.0 — #294
• @​eslint/compat 2.0.3 → 2.0.4 — #287

Full changelog: fossas/fossa-action@v1.9.0...v2.0.0

Commits

• 29693cc Bump eslint from 10.2.0 to 10.2.1 (#297)
• 4edee72 Bump @​typescript-eslint/eslint-plugin from 8.58.1 to 8.58.2 (#295)
• 5ebf75c Bump globals from 17.4.0 to 17.5.0 (#294)
• c765e94 Bump @​types/node from 24.12.0 to 24.12.2 (#293)
• e23f415 Make dependabot ignore major version upgrades to @​types/node (#291)
• b36611c Bump @​typescript-eslint/eslint-plugin from 8.58.0 to 8.58.1 (#290)
• 255120c Bump @​eslint/compat from 2.0.3 to 2.0.4 (#287)
• b5287b2 Bump eslint from 9.39.4 to 10.2.0 (#288)
• fd9df06 Fix FOSSA test --diff step to work with push events (#278)
• fca84c8 Upgrade to Node.js 24 and Yarn 4 (#277)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)