chore(deps): update all non-major dependencies in .github/workflows/scorecard.yml

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
github/codeql-action	action	patch	v3.27.0 -> v3.27.1
goreleaser/goreleaser-action	action	minor	v6.0.0 -> v6.1.0

---

Release Notes

github/codeql-action (github/codeql-action)

v3.27.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.1 - 08 Nov 2024

• The CodeQL Action now downloads bundles compressed using Zstandard on GitHub Enterprise Server when using Linux or macOS runners. This speeds up the installation of the CodeQL tools. This feature is already available to GitHub.com users. #​2573
• Update default CodeQL bundle version to 2.19.3. #​2576

See the full CHANGELOG.md for more information.

goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v6.1.0

Compare Source

What's Changed

• chore(deps): bump braces from 3.0.2 to 3.0.3 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/467
• chore(deps): bump docker/bake-action from 4 to 5 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/468
• chore(deps): bump semver from 7.6.2 to 7.6.3 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/470
• chore(deps): bump @​actions/http-client from 2.2.1 to 2.2.2 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/473
• chore(deps): bump @​actions/http-client from 2.2.2 to 2.2.3 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/474
• chore(deps): bump micromatch from 4.0.5 to 4.0.8 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/475
• chore(deps): bump @​actions/core from 1.10.1 to 1.11.1 by @​dependabot in https://github.com/goreleaser/goreleaser-action/pull/478
• docs: bump upload-artifact version by @​dunglas in https://github.com/goreleaser/goreleaser-action/pull/479
• chore: update generated content by @​crazy-max in https://github.com/goreleaser/goreleaser-action/pull/480

New Contributors

• @​dunglas made their first contribution in https://github.com/goreleaser/goreleaser-action/pull/479

Full Changelog: goreleaser/goreleaser-action@v6.0.0...v6.1.0

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.