build(deps): bump vmactions/netbsd-vm from 1.4.5 to 1.5.0

[dependabot]

Bumps vmactions/netbsd-vm from 1.4.5 to 1.5.0.

Release notes

Sourced from vmactions/netbsd-vm's releases.

v1.5.0

add 9.5

Full Changelog: vmactions/netbsd-vm@v1.4.9...v1.5.0

v1.4.9

support "11.0-microvm", which boots in 7 seconds. fix pkgsrc.

Full Changelog: vmactions/netbsd-vm@v1.4.8...v1.4.9

v1.4.8

Package mirrors: probe first, then trust

On 2026-08-30 the NetBSD.org package hosts went down together -- cdn.NetBSD.org and ftp.NetBSD.org are the same infrastructure behind a CDN, not independent mirrors -- and every pkg_add in every job spent minutes per package in TLS timeouts before dying.

The VM now probes the package mirrors at startup and points pkg_add at the ones that actually answer: cdn.NetBSD.org, ftp.NetBSD.org, the official French mirror ftp.fr.NetBSD.org, ftp.jaist.ac.jp and ftp.allbsd.org, in that order, keeping only the live ones. Dead hosts are dropped entirely rather than kept as fallbacks, because pkg_add walks the whole list for every package it installs, and each dead https entry costs minutes per package. If nothing answers, the configuration is left untouched.

This also retires a long-standing trap in the image's default configuration: its PKG_PATH ended with a NetBSD 9.0 fallback, so a package missing from the preferred hosts was silently installed from the 9.0 set, linked against libraries the running release does not ship. All entries are now same-release only.

The probe runs on every VM start, including boots from a cache-after-prepare image, so the mirror list is always from the current run, never frozen into a cache. Verified during the outage itself: with both NetBSD.org hosts dead, prepare installed its packages from the French mirror on the first try.

Under the hood

The runtime moves to anyvm v0.6.6. Changes under hooks/ now retrigger the project generation, so a hook fix is picked up by the test matrix without waiting for the daily rebuild.

Full Changelog: vmactions/netbsd-vm@v1.4.7...v1.4.8

v1.4.7

sync: tar

... (truncated)

Commits

• 20ee93a Update vmactions/netbsd-vm from base-vm
• 74dcc69 Generated from base-vm
• 2a8c76a Update vmactions/netbsd-vm from base-vm
• 7ebe4d4 Generated from base-vm
• a031b05 minor
• 2e1d6ef Update version to v1.4.9
• 0794073 Bump versions from upstream releases
• dae01dc Update vmactions/netbsd-vm from base-vm
• 2b17136 Generated from base-vm
• fa16db4 Update vmactions/netbsd-vm from base-vm
• Additional commits viewable in compare view

[SuperQ]

@dependabot rebase

[dependabot]

Superseded by #3838.