BUILD-11669 Fix config-npm in test-urc-happy-path

[julien-carsique-sonarsource]

Summary

• Add ./config-npm (+ id-token: write) before jdx/mise-action in the test-urc-happy-path job — the root mise.toml includes npm:markdownlint-cli which causes UNABLE_TO_VERIFY_LEAF_SIGNATURE on self-hosted runners without CA config

Related

• Update GitHub actions #282
• BUILD-11669 Allow pre-commit autoupdate as a post-upgrade command renovate-config#138
• https://sonarsource.atlassian.net/browse/BUILD-11669

[hashicorp-vault-sonar-prod]

BUILD-11669

[Copilot]

Pull request overview

This PR updates CI workflow setup to prevent NPM-related TLS failures on self-hosted runners when mise installs tools from mise.toml, by ensuring NPM is configured beforehand. It also includes a temporary Renovate configuration change to test behavior against an unmerged renovate-config branch.

Changes:

• Add id-token: write and run ./config-npm before jdx/mise-action in the test-urc-happy-path workflow job.
• Update .github/renovate.json to extend a branch-based SonarSource/renovate-config preset (noted as temporary/WIP in the PR description).

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
.github/workflows/test-update-release-channel.yml	Grants OIDC permission and configures NPM before running mise in the happy-path job.
.github/renovate.json	Points Renovate at an additional preset from a branch (temporary/WIP).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[gitar-bot]

Code Review ✅ Approved

Adds ./config-npm and id-token permissions before mise-action to resolve npm signature verification errors. Remember to revert the temporary renovate.json change before merging.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}