Update actions/checkout action to v5

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [external-secrets](https://github.com/external-secrets/external-secrets) | major | `0.20.4` -> `1.0.0` |

---

### Release Notes

<details>
<summary>external-secrets/external-secrets (external-secrets)</summary>

### [`v1.0.0`](https://github.com/external-secrets/external-secrets/releases/tag/v1.0.0)

[Compare Source](https://github.com/external-secrets/external-secrets/compare/v0.20.4...v1.0.0)

Image: `ghcr.io/external-secrets/external-secrets:v1.0.0`
Image: `ghcr.io/external-secrets/external-secrets:v1.0.0-ubi`
Image: `ghcr.io/external-secrets/external-secrets:v1.0.0-ubi-boringssl`

<!-- Release notes generated using configuration in .github/release.yml at main -->

#### What's Changed

##### General

- chore: release helm chart for v0.20.4 by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;5502](https://github.com/external-secrets/external-secrets/pull/5502)
- chore(actions): fix security alerts for github actions by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;5504](https://github.com/external-secrets/external-secrets/pull/5504)
- chore(release): fix incorrect shas from security alert pinning by [@&#8203;jakobmoellerdev](https://github.com/jakobmoellerdev) in [#&#8203;5512](https://github.com/external-secrets/external-secrets/pull/5512)
- chore: update dependencies by [@&#8203;eso-service-account-app](https://github.com/eso-service-account-app)\[bot] in [#&#8203;5519](https://github.com/external-secrets/external-secrets/pull/5519)
- fix: upgrade go version by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;5529](https://github.com/external-secrets/external-secrets/pull/5529)
- fix(charts): normalize certificate duration default value by [@&#8203;aslafy-z](https://github.com/aslafy-z) in [#&#8203;5497](https://github.com/external-secrets/external-secrets/pull/5497)
- chore(revive-linter): add revive linter configuration by [@&#8203;Lumexralph](https://github.com/Lumexralph) in [#&#8203;5515](https://github.com/external-secrets/external-secrets/pull/5515)
- feat: go module separation by [@&#8203;moolen](https://github.com/moolen) in [#&#8203;5498](https://github.com/external-secrets/external-secrets/pull/5498)
- fix: update deps script to reflect new go mod structure by [@&#8203;moolen](https://github.com/moolen) in [#&#8203;5532](https://github.com/external-secrets/external-secrets/pull/5532)
- fix: lint by [@&#8203;gusfcarvalho](https://github.com/gusfcarvalho) in [#&#8203;5536](https://github.com/external-secrets/external-secrets/pull/5536)
- feat: dynamic target implementation for external secrets sources  by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;5470](https://github.com/external-secrets/external-secrets/pull/5470)
- fix: codeql should not rebuild the world on every run by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;5540](https://github.com/external-secrets/external-secrets/pull/5540)
- fix(onepassword): Reduce API usage by [@&#8203;sondrelg](https://github.com/sondrelg) in [#&#8203;5410](https://github.com/external-secrets/external-secrets/pull/5410)
- feat(esoctl): adds bootstrap generator commands by [@&#8203;gusfcarvalho](https://github.com/gusfcarvalho) in [#&#8203;5539](https://github.com/external-secrets/external-secrets/pull/5539)
- fix: adds missing externalsecret\_type validation on generatorRef by [@&#8203;gusfcarvalho](https://github.com/gusfcarvalho) in [#&#8203;5547](https://github.com/external-secrets/external-secrets/pull/5547)
- chore(docs): fix the generic resource doc using the incorrect switch by [@&#8203;Skarlso](https://github.com/Skarlso) in [#&#8203;5548](https://github.com/external-secrets/external-secrets/pull/5548)
- docs(adopters): add Topicus.Education to adopters list by [@&#8203;sboschman](https://github.com/sboschman) in [#&#8203;5551](https://github.com/external-secrets/external-secrets/pull/5551)
- fix(build): use more portable bash by [@&#8203;tiagolobocastro](https://github.com/tiagolobocastro) in [#&#8203;5537](https://github.com/external-secrets/external-secrets/pull/5537)

##### Dependencies

- chore(deps): bump alpine from `4bcff63` to `4b7ce07` in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5507](https://github.com/external-secrets/external-secrets/pull/5507)
- chore(deps): bump golang from 1.25.2 to 1.25.3 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5506](https://github.com/external-secrets/external-secrets/pull/5506)
- chore(deps): bump golang from `aee43c3` to `aee43c3` by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5516](https://github.com/external-secrets/external-secrets/pull/5516)
- chore(deps): bump golang from 1.25.2-bookworm to 1.25.3-bookworm in /e2e by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5505](https://github.com/external-secrets/external-secrets/pull/5505)
- chore(deps): bump anchore/sbom-action from 0.20.8 to 0.20.9 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5508](https://github.com/external-secrets/external-secrets/pull/5508)
- chore(deps): bump hashicorp/setup-terraform from [`c529327`](c529327889) to [`982f6f0`](982f6f017c) by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5510](https://github.com/external-secrets/external-secrets/pull/5510)
- chore(deps): bump actions/github-script from 7.0.1 to 8.0.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5513](https://github.com/external-secrets/external-secrets/pull/5513)
- chore(deps): bump github/codeql-action from 4.30.9 to 4.31.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5514](https://github.com/external-secrets/external-secrets/pull/5514)
- chore(deps): bump actions/cache from 4.2.4 to 4.3.0 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5511](https://github.com/external-secrets/external-secrets/pull/5511)
- chore(deps): bump regex from 2025.9.18 to 2025.10.23 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5509](https://github.com/external-secrets/external-secrets/pull/5509)
- chore(deps): bump mkdocs-macros-plugin from 1.4.0 to 1.4.1 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5518](https://github.com/external-secrets/external-secrets/pull/5518)
- chore(deps): bump termcolor from 3.1.0 to 3.2.0 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5517](https://github.com/external-secrets/external-secrets/pull/5517)
- chore(deps): bump github/codeql-action from 4.31.0 to 4.31.2 by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5531](https://github.com/external-secrets/external-secrets/pull/5531)
- chore(deps): bump mkdocs-material from 9.6.22 to 9.6.23 in /hack/api-docs by [@&#8203;dependabot](https://github.com/dependabot)\[bot] in [#&#8203;5533](https://github.com/external-secrets/external-secrets/pull/5533)

#### New Contributors

- [@&#8203;sondrelg](https://github.com/sondrelg) made their first contribution in [#&#8203;5410](https://github.com/external-secrets/external-secrets/pull/5410)
- [@&#8203;tiagolobocastro](https://github.com/tiagolobocastro) made their first contribution in [#&#8203;5537](https://github.com/external-secrets/external-secrets/pull/5537)

**Full Changelog**: <https://github.com/external-secrets/external-secrets/compare/v0.20.4...v1.0.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi4wLjEiLCJ1cGRhdGVkSW5WZXIiOiI0Mi4wLjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNoYXJ0Il19-->

Reviewed-on: #1985
Co-authored-by: Renovate Bot <renovate-bot@alexlebens.net>
Co-committed-by: Renovate Bot <renovate-bot@alexlebens.net>

.gitea/workflows/lint-test-docker.yaml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 

.gitea/workflows/lint-test-helm.yaml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 

.gitea/workflows/renovate.yaml

@@ -16,7 +16,7 @@ jobs:
     container: ghcr.io/renovatebot/renovate:42
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Renovate
         run: renovate

clusters/cl01tl/platform/external-secrets/Chart.yaml

@@ -12,7 +12,7 @@ sources:
   - https://github.com/external-secrets/external-secrets/tree/main/deploy/charts/external-secrets
 dependencies:
   - name: external-secrets
-    version: 0.20.4
+    version: 1.0.0
     repository: https://charts.external-secrets.io
 icon: https://avatars.githubusercontent.com/u/68335991?s=48&v=4
 appVersion: 0.17.0