* commands: use the new endpoint to detect boards

* commands: change cacheKey

* commands: push always on top the `arduino` vendor

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 5.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* debian: correctly regenerate copyright file

* ci: add check

….0 (#2984)

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…able-discovery zombie process (#2985)

* Refactor mocked-discovery integration tests

* Added integration-test to check handling of multiple discovery instances

* Correctly clean-up pluggable-discoveries on gRPC instance close

… 5 (#2998)

Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 4 to 5.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@v4...v5)

---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 5.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v4...v5)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

)

Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 6 to 7.
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v6...v7)

---
updated-dependencies:
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…y builds (#3007)

The `docker.elastic.co/beats-dev/golang-crossbuild:1.24.4-darwin-arm64-debian10` container is used for the release
builds for the macOS Apple Silicon host. This container will only run on hosts of the linux/arm64 architecture.

The GitHub Actions runner machine previously used to perform the release builds is of the linux/amd64 architecture and
so is not compatible with the container. This caused the release builds to fail:

```
Status: Downloaded newer image for docker.elastic.co/beats-dev/golang-crossbuild:1.24.4-darwin-arm64-debian10
WARNING: The requested image's platform (linux/arm64/v8) does not match the detected host platform (linux/amd64/v3) and no specific platform was requested
exec /crossbuild: exec format error
task: Failed to run task "dist:macOS_ARM64": exit status 255
```

The failure is resolved by configuring the release workflows to use the `ubuntu-24.04-arm` runner machine that is
compatible with the container.

This was already done for the release and tester build workflows, but the fix was not applied to the nightly build
workflow at that time.

It is standard practice to use the "latest" GitHub Actions runner identifiers in the project's workflows, which causes
the workflow runs to always use the newest stable runner version. However, GitHub has broken from this established
convention by choosing to not provide "latest" identifiers for the Linux ARM runners. For this reason, the
version-specific runner name was used in the workflow. It will be necessary to manually update the runner name as new
stable versions are made available (or more likely after GitHub's removal of the runner in use breaks the workflows).

* Bump google.golang.org/grpc from 1.74.2 to 1.75.1

* Bump google.golang.org/protobuf from 1.36.7 to 1.36.9

* Bump golang.org/x/sys from 0.35.0 to 0.36.0

* Bump golang.org/x/text from 0.28.0 to 0.29.0

* Bump golang.org/x/term from 0.34.0 to 0.35.0

* Bump github.com/spf13/cobra

* Bump fortio.org/safecast from 1.0.0 to 1.2.0

* Bump github.com/ulikunitz/xz from 0.5.12 to 0.5.15

* Bump github.com/stretchr/testify from 1.11.0 to 1.11.1

* Bump github.com/go-viper/mapstructure/v2 from 2.3.0 to 2.4.0

* Updated license cache

* Updated deb license cache

* Run of go mod tidy

…2983)

* fix(builder): strip UTF-8 BOM from .ino sources before preprocessing

When a sketch .ino is saved as UTF-8 *with BOM*, the BOM bytes (EF BB BF)
reach the compiler and cause:
  stray '\357' in program
  stray '\273' in program
  stray '\277' in program

This strips the BOM at read-time so the merged .cpp and copied sources are clean.

Refs: arduino/arduino-ide#2752

* test: add unit tests for stripUTF8BOM