chore(deps): update github-actions

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	patch	v3.8.1 -> v3.8.2
actions/setup-node	action	digest	5e21ff4 -> 1a4442c
github/codeql-action	action	patch	v2.22.4 -> v2.22.7
google-github-actions/auth	action	minor	v1.1.1 -> v1.2.0
ossf/scorecard-action	action	patch	v2.3.0 -> v2.3.1
sigstore/cosign-installer	action	minor	v3.1.2 -> v3.2.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/setup-node (actions/setup-node)

v3.8.2

Compare Source

What's Changed

• Update semver by @​dmitry-shibanov in https://github.com/actions/setup-node/pull/861
• Update temp directory creation by @​nikolai-laevskii in https://github.com/actions/setup-node/pull/859
• Bump @​babel/traverse from 7.15.4 to 7.23.2 by @​dependabot in https://github.com/actions/setup-node/pull/870
• Add notice about binaries not being updated yet by @​nikolai-laevskii in https://github.com/actions/setup-node/pull/872
• Update toolkit cache and core by @​dmitry-shibanov and @​seongwon-privatenote in https://github.com/actions/setup-node/pull/875

Full Changelog: actions/setup-node@v3...v3.8.2

github/codeql-action (github/codeql-action)

v2.22.7

Compare Source

v2.22.6

Compare Source

v2.22.5

Compare Source

google-github-actions/auth (google-github-actions/auth)

v1.2.0

Compare Source

What's Changed

• Update deps by @​sethvargo in https://github.com/google-github-actions/auth/pull/312
• dependabot: only do security updates by @​sethvargo in https://github.com/google-github-actions/auth/pull/320
• update all deps by @​sethvargo in https://github.com/google-github-actions/auth/pull/321
• Update README.md by @​mattseymour in https://github.com/google-github-actions/auth/pull/332
• Update deps to Node 20 by @​sethvargo in https://github.com/google-github-actions/auth/pull/339
• Drop chai and mocha deps by @​sethvargo in https://github.com/google-github-actions/auth/pull/342
• Switch to more resilient testing by @​sethvargo in https://github.com/google-github-actions/auth/pull/343
• Build latest versions by @​sethvargo in https://github.com/google-github-actions/auth/pull/345
• Release: v1.2.0 by @​google-github-actions-bot in https://github.com/google-github-actions/auth/pull/346

New Contributors

• @​mattseymour made their first contribution in https://github.com/google-github-actions/auth/pull/332

Full Changelog: google-github-actions/auth@v1...v1.2.0

ossf/scorecard-action (ossf/scorecard-action)

v2.3.1

Compare Source

What's Changed

• 🌱 Bump github.com/ossf/scorecard/v4 from v4.13.0 to v4.13.1 by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1282
  • Adds additional Fuzzing detection and fixes a SAST bug related to detecting CodeQL. For a full changelist of what this includes, see the v4.13.1 release notes

Full Changelog: ossf/scorecard-action@v2.3.0...v2.3.1

sigstore/cosign-installer (sigstore/cosign-installer)

v3.2.0

Compare Source

Note: This release comes with a fix for CVE-2023-46737 described in this Github Security Advisory. Please upgrade to this release ASAP

see https://github.com/sigstore/cosign/releases/tag/v2.2.1

What's Changed

• Support the runner context of gitea act by @​josedev-union in https://github.com/sigstore/cosign-installer/pull/147
• bump cosign to v2.2.1 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/148
• test with latest go version by @​bobcallaway in https://github.com/sigstore/cosign-installer/pull/150

New Contributors

• @​josedev-union made their first contribution in https://github.com/sigstore/cosign-installer/pull/147

Full Changelog: sigstore/cosign-installer@v3...v3.2.0

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.