Update bbangert/nerves_github_updater action to v0.2.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
bbangert/nerves_github_updater	action	minor	0.1.0 → 0.2.0

---

Release Notes

bbangert/nerves_github_updater (bbangert/nerves_github_updater)

v0.2.0

Compare Source

Changed

• Installing the version already running is now refused. The version
  gate gated only :lt, so an :eq comparison fell through and
  re-downloaded, re-flashed and rebooted into the same firmware. That
  achieves nothing while costing a download, a flash-cycle of wear and a
  reboot — and it is a replay vector, because the busy guard rejects only
  concurrent installs and never repeats, so any caller able to reach
  install_latest/1 could loop a device indefinitely. :eq now fails as
  {:reinstall_refused, tag}.

  Set the new :allow_reinstall opt (default false) to keep the old
  behaviour, or for a deliberate re-flash such as recovering a corrupted
  partition. It is a mutable opt, so update_config/2 can flip it at
  runtime like :allow_downgrade. :gt, :missing and :incomparable
  are unaffected.

  This is a behaviour change for anyone relying on same-version
  reinstall, hence the minor bump.

v0.1.1

Compare Source

Fixed

• Isolate the fwup port in a monitored worker process so an fwup
  process that dies mid-stream (broken pipe / :epipe) surfaces as
  {:error, {:fwup_port_exit, reason}} instead of propagating an exit
  signal that crashes the caller. Adds host-safe unit coverage for the
  port-streaming path via a fake fwup executable.
• Updater.state/1 and update_config/2 no longer crash a caller that
  polls during a long check/install (the loop blocks by design): they
  return a busy snapshot / {:error, :busy} on call timeout.
• Bound the manifest (4 MiB) and signature (64 KiB) downloads so an
  oversized pre-verification asset can't exhaust device memory.

Changed

• Signature.verify_manifest/3 returns :invalid_public_key_size
  (distinct from :missing_public_key) for a wrong-length key.
• Drop the unused nerves_runtime dependency — KV/reboot/target are all
  opts-injected — which also removes the libmnl build requirement in CI.
• Bump aws-actions/configure-aws-credentials and actions/cache to v6.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (0.2.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.