deps: Update dependencies for github

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	minor	v4.1.0 -> v4.2.0
actions/upload-artifact	action	patch	v4.6.0 -> v4.6.1
github/codeql-action	action	patch	v3.28.1 -> v3.28.10
google-github-actions/auth	action	patch	v2.1.7 -> v2.1.8
google-github-actions/get-secretmanager-secrets	action	patch	v2.2.2 -> v2.2.3
ossf/scorecard-action	action	patch	v2.4.0 -> v2.4.1

---

Release Notes

actions/setup-node (actions/setup-node)

v4.2.0

Compare Source

actions/upload-artifact (actions/upload-artifact)

v4.6.1

Compare Source

What's Changed

• Update to use artifact 2.2.2 package by @​yacaovsnc in https://github.com/actions/upload-artifact/pull/673

Full Changelog: actions/upload-artifact@v4...v4.6.1

github/codeql-action (github/codeql-action)

v3.28.10

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.10 - 21 Feb 2025

• Update default CodeQL bundle version to 2.20.5. #​2772
• Address an issue where the CodeQL Bundle would occasionally fail to decompress on macOS. #​2768

See the full CHANGELOG.md for more information.

v3.28.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.9 - 07 Feb 2025

• Update default CodeQL bundle version to 2.20.4. #​2753

See the full CHANGELOG.md for more information.

v3.28.8

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.8 - 29 Jan 2025

• Enable support for Kotlin 2.1.10 when running with CodeQL CLI v2.20.3. #​2744

See the full CHANGELOG.md for more information.

v3.28.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.7 - 29 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.6

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.6 - 27 Jan 2025

• Re-enable debug artifact upload for CLI versions 2.20.3 or greater. #​2726

See the full CHANGELOG.md for more information.

v3.28.5

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.5 - 24 Jan 2025

• Update default CodeQL bundle version to 2.20.3. #​2717

See the full CHANGELOG.md for more information.

v3.28.4

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.4 - 23 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

v3.28.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.3 - 22 Jan 2025

• Update default CodeQL bundle version to 2.20.2. #​2707
• Fix an issue downloading the CodeQL Bundle from a GitHub Enterprise Server instance which occurred when the CodeQL Bundle had been synced to the instance using the CodeQL Action sync tool and the Actions runner did not have Zstandard installed. #​2710
• Uploading debug artifacts for CodeQL analysis is temporarily disabled. #​2712

See the full CHANGELOG.md for more information.

v3.28.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.2 - 21 Jan 2025

No user facing changes.

See the full CHANGELOG.md for more information.

google-github-actions/auth (google-github-actions/auth)

v2.1.8

Compare Source

What's Changed

• Update TROUBLESHOOTING.md by @​sethvargo in https://github.com/google-github-actions/auth/pull/457
• fix: add runs-on to README.md example by @​lbarthon in https://github.com/google-github-actions/auth/pull/460
• security: bump undici from 5.28.4 to 5.28.5 in the npm_and_yarn group by @​dependabot in https://github.com/google-github-actions/auth/pull/463
• Update deps by @​sethvargo in https://github.com/google-github-actions/auth/pull/466
• Release: v2.1.8 by @​google-github-actions-bot in https://github.com/google-github-actions/auth/pull/467

New Contributors

• @​lbarthon made their first contribution in https://github.com/google-github-actions/auth/pull/460

Full Changelog: google-github-actions/auth@v2...v2.1.8

google-github-actions/get-secretmanager-secrets (google-github-actions/get-secretmanager-secrets)

v2.2.3

Compare Source

What's Changed

• security: bump undici from 5.28.4 to 5.28.5 in the npm_and_yarn group by @​dependabot in https://github.com/google-github-actions/get-secretmanager-secrets/pull/312
• Update deps by @​sethvargo in https://github.com/google-github-actions/get-secretmanager-secrets/pull/313
• Release: v2.2.3 by @​google-github-actions-bot in https://github.com/google-github-actions/get-secretmanager-secrets/pull/314

Full Changelog: google-github-actions/get-secretmanager-secrets@v2...v2.2.3

ossf/scorecard-action (ossf/scorecard-action)

v2.4.1

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.