Bump the actions group across 1 directory with 3 updates

Bumps the actions group with 3 updates in the / directory: [jose](https://github.com/panva/jose), [npm](https://github.com/npm/cli) and [winston](https://github.com/winstonjs/winston).


Updates `jose` from 5.4.0 to 5.6.3
- [Release notes](https://github.com/panva/jose/releases)
- [Changelog](https://github.com/panva/jose/blob/main/CHANGELOG.md)
- [Commits](panva/jose@v5.4.0...v5.6.3)

Updates `npm` from 10.8.1 to 10.8.2
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/CHANGELOG.md)
- [Commits](npm/cli@v10.8.1...v10.8.2)

Updates `winston` from 3.13.0 to 3.13.1
- [Release notes](https://github.com/winstonjs/winston/releases)
- [Changelog](https://github.com/winstonjs/winston/blob/master/CHANGELOG.md)
- [Commits](winstonjs/winston@v3.13.0...v3.13.1)

---
updated-dependencies:
- dependency-name: jose
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: npm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: winston
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>