chore(deps): update github-actions

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v2.1.29 -> v2.1.31
ossf/scorecard-action	action	patch	v2.0.0 -> v2.0.6

---

Release Notes

github/codeql-action

v2.1.31

Compare Source

v2.1.30

Compare Source

ossf/scorecard-action

v2.0.6

Compare Source

What's Changed

• Fix - Broken dockerfile by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/979

Full Changelog: ossf/scorecard-action@v2.0.5...v2.0.6

v2.0.5

Compare Source

What's Changed

• Remove trailing space from example by @​jamacku in https://github.com/ossf/scorecard-action/pull/955
• 🌱 Bump actions/cache from 3.0.8 to 3.0.10 by @​dependabot in https://github.com/ossf/scorecard-action/pull/956
• 🌱 Bump github/codeql-action from 2.1.25 to 2.1.26 by @​dependabot in https://github.com/ossf/scorecard-action/pull/957
• 🌱 Bump step-security/harden-runner from 1.4.5 to 1.5.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/958
• 🌱 Bump debian from 5cf1d98 to b46fc4e by @​dependabot in https://github.com/ossf/scorecard-action/pull/959
• 🌱 Bump github.com/sigstore/cosign from 1.12.1 to 1.13.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/962
• 🌱 Upgrade to go 1.19 by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/961
• 🌱 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/967
• 🌱 Bump golang from c2a98a5 to b850621 by @​dependabot in https://github.com/ossf/scorecard-action/pull/966
• 🌱 Bump golang from b850621 to 25de7b6 by @​dependabot in https://github.com/ossf/scorecard-action/pull/968
• New release for Scorecard v4.8.0 by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/969

New Contributors

• @​jamacku made their first contribution in https://github.com/ossf/scorecard-action/pull/955

Full Changelog: ossf/scorecard-action@v2.0.4...v2.0.5

v2.0.4

Compare Source

Fixes #​856

What's Changed

• 🌱 Bump github.com/caarlos0/env/v6 from 6.10.0 to 6.10.1 by @​dependabot in https://github.com/ossf/scorecard-action/pull/934
• feat: do not run signing on pull requests by @​laurentsimon in https://github.com/ossf/scorecard-action/pull/935
• 🌱 Bump debian from 11.4-slim to 11.5-slim by @​dependabot in https://github.com/ossf/scorecard-action/pull/936
• 🌱 Bump github.com/sigstore/cosign from 1.11.1 to 1.12.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/938
• 🌱 Bump github/codeql-action from 2.1.22 to 2.1.24 by @​dependabot in https://github.com/ossf/scorecard-action/pull/941
• 🐛 Restore behavior of ignoring scorecard runtime errors by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/948
• 🌱 Bump actions/dependency-review-action from 2.1.0 to 2.4.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/950
• 🌱 Bump github.com/sigstore/cosign from 1.12.0 to 1.12.1 by @​dependabot in https://github.com/ossf/scorecard-action/pull/947
• 🌱 Bump github/codeql-action from 2.1.24 to 2.1.25 by @​dependabot in https://github.com/ossf/scorecard-action/pull/949
• 🌱 Bump codecov/codecov-action from 3.1.0 to 3.1.1 by @​dependabot in https://github.com/ossf/scorecard-action/pull/942
• Create v2.0.4 patch by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/952

New Contributors

• @​spencerschrock made their first contribution in https://github.com/ossf/scorecard-action/pull/948

Full Changelog: ossf/scorecard-action@v2.0.3...v2.0.4

v2.0.3

Compare Source

Patch for fix in #​898

v2.0.2

Compare Source

Fixes https://github.com/ossf/scorecard-action/issues/895

v2.0.1

Compare Source

Fix for #​856

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.