chore(deps): bump redhat-actions/openshift-tools-installer from 2 to 3

[dependabot]

Bumps redhat-actions/openshift-tools-installer from 2 to 3.

Release notes

Sourced from redhat-actions/openshift-tools-installer's releases.

v3.0

Breaking Changes

• Removed kam client — the redhat-developer/kam project is abandoned (last release Oct 2023) #169
• Switched kamel and operator-sdk to GitHub-only sources — the OpenShift mirror versions are significantly behind upstream. Using source: mirror with these clients will now produce an error #170
• Switched tkn from the stale v4 clients mirror to the CGW pipelines mirror — versions prior to 1.15.4 are no longer available via mirror #161

Features

• Add argocd client from the CGW openshift-gitops mirror #161
• Add Content Gateway (CGW) mirror support for Helm 4.x — users can now install Helm 4 with helm: "4" #161
• Support multiple mirror base URLs per client, enabling version resolution across both the v4 clients mirror and CGW #161

Bug Fixes

• Fix isHashMissing check to short-circuit before fetching hash files — previously it only applied when no hash file existed in the directory, but CGW pipelines has an incompatible hash file format #168
• Fix js-yaml CVE-2026-59870 via npm override #167
• Fix octokit openapi-types 28.x type compatibility #167
• Fix Dependabot PR CI failures #156
• Fix npm audit vulnerabilities and simplify security scan #160

Dependencies

• Bump @octokit/openapi-types from 27.0.0 to 28.0.0 #163
• Bump @octokit/plugin-paginate-rest from 14.0.0 to 15.0.0 #165
• Bump brace-expansion to 5.0.8 and js-yaml to 5.2.2 #151
• Bump dev-dependencies group #158

Changelog

Sourced from redhat-actions/openshift-tools-installer's changelog.

v1.13

• Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/
• Update @​actions/http-client to 2.2.1
• Update code to support the new version of @​actions/http-toolkit

Commits

• e3b32c2 Update changelog for v3.0 release (#171)
• 3000953 Switch kamel and operator-sdk to GitHub-only sources (#170)
• 8826c0f Remove kam (GitOps Application Manager) client (#169)
• d173de3 Fix hash verification for clients with incompatible hash files (#168)
• 07487a0 Add CGW mirror support for Helm 4, argocd, and tkn (#161)
• fcf47d0 deps: bump @​octokit/plugin-paginate-rest from 14.0.0 to 15.0.0 (#165)
• ad975af deps: bump @​octokit/openapi-types from 27.0.0 to 28.0.0 (#163)
• 776204d ci: bump tcort/github-action-markdown-link-check from 1.1.2 to 1.1.3 (#166)
• 26a872b Fix js-yaml CVE-2026-59870 and octokit openapi-types compatibility (#167)
• 2e67751 Fix npm audit vulnerabilities and simplify security scan (#160)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign ebensh for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a stackrox member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.