chore(deps): update giantswarm/schemalint action to v2.6.2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
giantswarm/schemalint	action	patch	v2.6.1 → v2.6.2

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

giantswarm/schemalint (giantswarm/schemalint)

v2.6.2

Compare Source

Changed

• cluster-app rule set: allow unevaluatedProperties: false on a schema that also has
  $ref. This is the only way to reject unknown keys on a referenced object in draft
  2020-12 — additionalProperties only considers sibling properties/patternProperties
  (2020-12 core, §10.3.2), so additionalProperties: false next to a $ref rejects every
  field the referenced schema defines and breaks helm template. Every other use of
  unevaluatedProperties, and all use of unevaluatedItems, remains an error. Spellings
  that leave the object open anyway are not covered by the exception: an additionalProperties
  that is not false either next to the $ref or on the target it resolves to (both annotate
  every property as evaluated), and a type that is not object, taken from the $ref target
  when the schema declares none.
• cluster-app rule set: "Object should disable additional properties" no longer fires on
  a $ref closed with unevaluatedProperties: false. Such an object is closed, and
  adding additionalProperties: false to it would be wrong. This applies to the $ref
  target as well, which is reported at the same location as the referring schema.
• cluster-app rule set: "Object must have at least one property" now counts properties
  reached through $ref, so a schema that is only a $ref to an object with properties
  no longer errors.
• Release binaries now include darwin/amd64, darwin/arm64, windows/amd64, and windows/arm64 alongside the existing linux targets. Windows binaries are named schemalint-windows-<arch>.exe.
• Update golang.org/x/sys to v0.47.0, fixing CVE-2026-39824.
• Update github.com/santhosh-tekuri/jsonschema to v6. Findings on every schema under
  pkg/ are unchanged, with two differences to be aware of. The wording of the "invalid
  JSON Schema" message for a schema that does not compile comes from the library. And
  format now has to name a format the library knows: v5 accepted any name, so
  format: something-made-up counted as a constraint on a string, and no longer does.
• Update golang.org/x/text to v0.39.0, fixing CVE-2026-56852. jsonschema v6 pulls it in.

Fixed

• A finding is no longer reported twice for the same location. A $ref and its target
  resolve to one location, so a rule that visits both reported it once per visit.
• "Property title must not contain leading or trailing spaces" now points at the offending
  property instead of the root of the schema.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.