chore(deps): update dependency semantic-release to v25.0.9

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
semantic-release	25.0.2 → 25.0.9

---

Release Notes

semantic-release/semantic-release (semantic-release)

v25.0.9

Compare Source

Bug Fixes

• do not expose the authenticated repository URL in EGITNOPERMISSION errors (#​4283) (8d905a5)

v25.0.8

Compare Source

Bug Fixes

• handle potential null values in commit message and gitTags trimming (0a60004)
• hide-sensitive: mask key/auth/webhook env vars (973d763)
• mask sensitive environment variables and improve commit handling (#​4252) (1bfdc52)
• prevent template evaluation syntax in branch expansion and tag formatting (f121540)

v25.0.7

Compare Source

Bug Fixes

• argument Injection via repositoryUrl in package.json (#​4245) (c46dbda)

v25.0.6

Compare Source

Bug Fixes

• ensure encoded secrets get masked (8e28dd3)

v25.0.5

Compare Source

Bug Fixes

• revert: next (#​4200) (db8ffaa)

v25.0.4

Compare Source

Bug Fixes

• code-quality: add missing comma in context object for consistency (493d6cd)

v25.0.3

Compare Source

Bug Fixes

• deps: remove deprecated semver-diff (#​3980) (f404124)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

---

Note

Low Risk
Single CI dependency pin with no application code changes; the upgrade pulls in security-related fixes for the release tooling.

Overview
Bumps the semantic-release version pinned in the release GitHub Actions job from 25.0.2 to 25.0.9 via semantic_version on cycjimmy/semantic-release-action. No other workflow steps or release behavior change.

The newer patch releases mainly add security and robustness fixes (secret masking, safer handling of repositoryUrl, less sensitive error output, null-safety in commit/tag handling).

^{Reviewed by Cursor Bugbot for commit 423460f. Bugbot is set up for automated code reviews on this repo. Configure here.}

[MikeMcC399]

Manually merging into a Renovate PR breaks the ability for Renovate to keep the PR up-to-date. This is not good practice. There is already a button that Renovate provides in the original post in order to rebase.

Similar functionality also exists on https://developer.mend.io/github/cypress-io/github-action.