Update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v2.3.2 -> v2.3.6
step-security/harden-runner	action	minor	v2.3.1 -> v2.4.0

---

Release Notes

github/codeql-action

v2.3.6

Compare Source

v2.3.5

Compare Source

v2.3.4

Compare Source

v2.3.3

Compare Source

step-security/harden-runner

v2.4.0

Compare Source

What's Changed

• Release v2.4.0 by @​varunsh-coder and @​h0x0er in https://github.com/step-security/harden-runner/pull/292
  Adds support for wildcard domains in block mode. e.g. you can add *.data.mcr.microsoft.com:443 to the allowed list, and egress traffic will be allowed to eastus.data.mcr.microsoft.com:443 and westus.data.mcr.microsoft.com:443.
  Link to documentation.
• Bump actions/checkout from 3.5.0 to 3.5.2 by @​dependabot in https://github.com/step-security/harden-runner/pull/277
• Bump github/codeql-action from 2.2.11 to 2.2.12 by @​dependabot in https://github.com/step-security/harden-runner/pull/278
• Bump step-security/harden-runner from 2.3.0 to 2.3.1 by @​dependabot in https://github.com/step-security/harden-runner/pull/282
• Added a workflow for reviewing code changes using stepsecurity code reviewer by @​boahc077 in https://github.com/step-security/harden-runner/pull/290

Full Changelog: step-security/harden-runner@v2...v2.4.0

---

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.