Bump redhat-actions/openshift-tools-installer from 1 to 3

[dependabot]

Bumps redhat-actions/openshift-tools-installer from 1 to 3.

Release notes

Sourced from redhat-actions/openshift-tools-installer's releases.

v3.0

Breaking Changes

• Removed kam client — the redhat-developer/kam project is abandoned (last release Oct 2023) #169
• Switched kamel and operator-sdk to GitHub-only sources — the OpenShift mirror versions are significantly behind upstream. Using source: mirror with these clients will now produce an error #170
• Switched tkn from the stale v4 clients mirror to the CGW pipelines mirror — versions prior to 1.15.4 are no longer available via mirror #161

Features

• Add argocd client from the CGW openshift-gitops mirror #161
• Add Content Gateway (CGW) mirror support for Helm 4.x — users can now install Helm 4 with helm: "4" #161
• Support multiple mirror base URLs per client, enabling version resolution across both the v4 clients mirror and CGW #161

Bug Fixes

• Fix isHashMissing check to short-circuit before fetching hash files — previously it only applied when no hash file existed in the directory, but CGW pipelines has an incompatible hash file format #168
• Fix js-yaml CVE-2026-59870 via npm override #167
• Fix octokit openapi-types 28.x type compatibility #167
• Fix Dependabot PR CI failures #156
• Fix npm audit vulnerabilities and simplify security scan #160

Dependencies

• Bump @octokit/openapi-types from 27.0.0 to 28.0.0 #163
• Bump @octokit/plugin-paginate-rest from 14.0.0 to 15.0.0 #165
• Bump brace-expansion to 5.0.8 and js-yaml to 5.2.2 #151
• Bump dev-dependencies group #158

v2.0

Breaking Changes

• Action runtime upgraded from Node.js 16 to Node.js 24 (runs.using: node24). Requires GitHub Actions runner v2.320.0+ or GHES 3.12+.
• Removed odo tool (archived upstream)

Features

• Add butane tool support (OpenShift mirror) (#100, #148)
• Add ocm CLI tool support (GitHub) (#115, #148)
• Add skip_cache_for input for per-client cache skipping (#2, #150)
• Enable caching on GHES 3.5+ — removed the hardcoded GHES cache skip (#111, #148)
• Add arm64 Linux support for OCP tools (#139)

Bug Fixes

• Fix arm64 OCP installs and mirror URL resolution (#139)
• Fix macOS arm64 CI failures for tools lacking arm64 builds (#139)
• Change warning to info for multiple file notice (#121)

Dependencies & Infrastructure

• Upgrade to TypeScript 6, ESLint 10 with flat config (#134)
• Upgrade @octokit/core 5→7, @octokit/plugin-paginate-rest 9→14, @octokit/openapi-types 22→27 (#149)
• Upgrade webpack-cli 6→7 (#149)
• Upgrade redhat-actions/common 1→2 (#141)
• Upgrade @types/node to 26.x (#144)
• Replace dead CRDA vulnerability scan with npm audit (#140)
• Reduce CI matrix from ~53 to ~28 jobs

... (truncated)

Changelog

Sourced from redhat-actions/openshift-tools-installer's changelog.

v1.13

• Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/
• Update @​actions/http-client to 2.2.1
• Update code to support the new version of @​actions/http-toolkit

v1.12

• Update action/core dependency to 1.10.0

Commits

• e3b32c2 Update changelog for v3.0 release (#171)
• 3000953 Switch kamel and operator-sdk to GitHub-only sources (#170)
• 8826c0f Remove kam (GitOps Application Manager) client (#169)
• d173de3 Fix hash verification for clients with incompatible hash files (#168)
• 07487a0 Add CGW mirror support for Helm 4, argocd, and tkn (#161)
• fcf47d0 deps: bump @​octokit/plugin-paginate-rest from 14.0.0 to 15.0.0 (#165)
• ad975af deps: bump @​octokit/openapi-types from 27.0.0 to 28.0.0 (#163)
• 776204d ci: bump tcort/github-action-markdown-link-check from 1.1.2 to 1.1.3 (#166)
• 26a872b Fix js-yaml CVE-2026-59870 and octokit openapi-types compatibility (#167)
• 2e67751 Fix npm audit vulnerabilities and simplify security scan (#160)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)