chore(deps): update github actions (#68)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/lint-mega.yml

@@ -45,7 +45,7 @@ jobs:
       MEGALINTER_CONFIG: ${{ inputs.megalinter-config }} # Use the input value
     steps:
       - name: Harden GitHub runner
-        uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
+        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
         with:
           egress-policy: ${{ inputs.egress-policy }}
       - name: Checkout repository
@@ -65,6 +65,6 @@ jobs:
           retention-days: 5
       - name: Upload MegaLinter scan results to GitHub Security tab
         if: success() || failure()
-        uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
+        uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
         with:
           sarif_file: "megalinter-reports/megalinter-report.sarif"

.github/workflows/publish-container.yml

@@ -187,7 +187,7 @@ jobs:
       metadata: ${{ steps.metadata.outputs.json }}
     steps:
       - name: Harden GitHub runner
-        uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
+        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
         with:
           egress-policy: ${{ inputs.egress-policy }}
       - name: Checkout repository
@@ -365,7 +365,7 @@ jobs:
           vuln-type: 'os,library'
       - name: Upload Trivy scan results
         if: ${{ inputs['enable-scan'] && inputs['push-image'] }}
-        uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
+        uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
         with:
           sarif_file: 'trivy-results.sarif'
           category: 'container-scan'

.github/workflows/release-github.yml

@@ -126,7 +126,7 @@ jobs:
       id-token: write
     steps:
       - name: Harden GitHub runner
-        uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
+        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
         with:
           egress-policy: ${{ inputs.egress-policy }}
       - name: Checkout repository with moved tag

.github/workflows/security-openssf-scorecard.yml

@@ -49,7 +49,7 @@ jobs:
       id-token: write
     steps:
       - name: Harden GitHub runner
-        uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
+        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
         with:
           egress-policy: ${{ inputs.egress-policy }}
       - name: Checkout repository
@@ -73,6 +73,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
+        uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8
         with:
           sarif_file: results.sarif

.github/workflows/version-bump.yml

@@ -134,7 +134,7 @@ jobs:
       contents: write
     steps:
       - name: Harden GitHub runner
-        uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
+        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
         with:
           egress-policy: ${{ inputs.egress-policy }}
       - name: Checkout repository