Bump Azure/setup-azd from 2.3.0 to 2.4.0

[dependabot]

Bumps Azure/setup-azd from 2.3.0 to 2.4.0.

Release notes

Sourced from Azure/setup-azd's releases.

setup-azd_v2.4.0

2.4.0 (2026-08-05)

Features Added

• [566] Harden azd version installation. The version input is validated before use — accepted values are latest, stable, daily, or a semantic version such as 1.2.3, 1.2.3-beta.1, or 1.2.3+build.5 — and installer scripts are downloaded to an isolated temporary directory and invoked with explicit process arguments instead of a shell command line.

Changelog

Sourced from Azure/setup-azd's changelog.

2.4.0 (2026-08-05)

Features Added

• [566] Harden azd version installation. The version input is validated before use — accepted values are latest, stable, daily, or a semantic version such as 1.2.3, 1.2.3-beta.1, or 1.2.3+build.5 — and installer scripts are downloaded to an isolated temporary directory and invoked with explicit process arguments instead of a shell command line.

Commits

• 0b7e3a3 release 2.4.0 - harden azd version installation (#567)
• e6951e8 build(deps-dev): bump js-yaml override to ^4.3.0 to fix GHSA-52cp-r559-cp3m (...
• f5b7aa1 Harden azd version installation (#566)
• d689624 build(deps): bump undici from 6.27.0 to 6.28.0 (#564)
• 43b4dc8 build(deps-dev): bump js-yaml from 5.2.2 to 5.2.3 (#565)
• 3e4a1fc build(deps): bump brace-expansion (#563)
• 9a1412a build(deps): bump github/codeql-action from 4 to 4.37.4 (#562)
• 3edef31 build(deps-dev): bump ts-jest from 29.4.11 to 29.4.12 (#558)
• 56858f6 build(deps-dev): bump js-yaml from 5.2.1 to 5.2.2 (#556)
• f1416c3 build(deps-dev): bump eslint from 10.7.0 to 10.8.0 (#560)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)