build(deps): bump redhat-actions/openshift-tools-installer from 2 to 3 in the actions group

[dependabot]

Bumps the actions group with 1 update: redhat-actions/openshift-tools-installer.

Updates redhat-actions/openshift-tools-installer from 2 to 3

Release notes

Sourced from redhat-actions/openshift-tools-installer's releases.

v3.0

Breaking Changes

• Removed kam client — the redhat-developer/kam project is abandoned (last release Oct 2023) #169
• Switched kamel and operator-sdk to GitHub-only sources — the OpenShift mirror versions are significantly behind upstream. Using source: mirror with these clients will now produce an error #170
• Switched tkn from the stale v4 clients mirror to the CGW pipelines mirror — versions prior to 1.15.4 are no longer available via mirror #161

Features

• Add argocd client from the CGW openshift-gitops mirror #161
• Add Content Gateway (CGW) mirror support for Helm 4.x — users can now install Helm 4 with helm: "4" #161
• Support multiple mirror base URLs per client, enabling version resolution across both the v4 clients mirror and CGW #161

Bug Fixes

• Fix isHashMissing check to short-circuit before fetching hash files — previously it only applied when no hash file existed in the directory, but CGW pipelines has an incompatible hash file format #168
• Fix js-yaml CVE-2026-59870 via npm override #167
• Fix octokit openapi-types 28.x type compatibility #167
• Fix Dependabot PR CI failures #156
• Fix npm audit vulnerabilities and simplify security scan #160

Dependencies

• Bump @octokit/openapi-types from 27.0.0 to 28.0.0 #163
• Bump @octokit/plugin-paginate-rest from 14.0.0 to 15.0.0 #165
• Bump brace-expansion to 5.0.8 and js-yaml to 5.2.2 #151
• Bump dev-dependencies group #158

Changelog

Sourced from redhat-actions/openshift-tools-installer's changelog.

v1.13

• Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/
• Update @​actions/http-client to 2.2.1
• Update code to support the new version of @​actions/http-toolkit

Commits

• e3b32c2 Update changelog for v3.0 release (#171)
• 3000953 Switch kamel and operator-sdk to GitHub-only sources (#170)
• 8826c0f Remove kam (GitOps Application Manager) client (#169)
• d173de3 Fix hash verification for clients with incompatible hash files (#168)
• 07487a0 Add CGW mirror support for Helm 4, argocd, and tkn (#161)
• fcf47d0 deps: bump @​octokit/plugin-paginate-rest from 14.0.0 to 15.0.0 (#165)
• ad975af deps: bump @​octokit/openapi-types from 27.0.0 to 28.0.0 (#163)
• 776204d ci: bump tcort/github-action-markdown-link-check from 1.1.2 to 1.1.3 (#166)
• 26a872b Fix js-yaml CVE-2026-59870 and octokit openapi-types compatibility (#167)
• 2e67751 Fix npm audit vulnerabilities and simplify security scan (#160)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions