chore(deps): update all non-major dependencies

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update
@types/express (source)	4.17.17 -> 4.17.19					dependencies	patch
@types/minimist (source)	1.2.2 -> 1.2.3					devDependencies	patch
@types/node (source)	20.7.0 -> 20.8.5					devDependencies	minor
@types/supertest (source)	2.0.12 -> 2.0.14					devDependencies	patch
github/codeql-action	v2.21.8 -> v2.22.2					action	minor
gts	5.0.1 -> 5.2.0					devDependencies	minor
ossf/scorecard-action	v2.2.0 -> v2.3.0					action	minor
step-security/harden-runner	v2.5.1 -> v2.6.0					action	minor

---

Release Notes

github/codeql-action (github/codeql-action)

v2.22.2

Compare Source

v2.22.1

Compare Source

v2.22.0

Compare Source

v2.21.9

Compare Source

google/gts (gts)

v5.2.0

Compare Source

Features

• warn for ts-ignore comments for ESM (#​810) (350fbf0)

v5.1.1

Compare Source

Bug Fixes

• revert feat: no-floating-promises (44de7f7)

v5.1.0

Compare Source

Features

• no-floating-promises (#​756) (c93e733)

Bug Fixes

• deps: update dependency eslint to v8.49.0 (#​784) (5e2a05c)
• deps: update dependency eslint to v8.50.0 (#​802) (794abf3)
• deps: update dependency eslint-config-prettier to v8.10.0 (#​785) (5391d89)
• deps: update dependency eslint-config-prettier to v9 (#​777) (470977a)
• deps: update dependency prettier to v3.0.3 (#​782) (5a04e76)
• run eslint from PATH (#​654) (5dc2a76)

ossf/scorecard-action (ossf/scorecard-action)

v2.3.0

Compare Source

What's Changed

• 🌱 Bump github.com/ossf/scorecard/v4 from v4.11.0 to v4.13.0 by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1270
  • For a full changelist of what this includes, see the v4.12.0 and v4.13.0 release notes
• ✨ Send rekor tlog index to webapp when publishing results by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1169
• 🐛 Prevent url clipping for GHES instances by @​rajbos in https://github.com/ossf/scorecard-action/pull/1225

Documentation

• 📖 Update access rights needed to see the results in code scanning by @​rajbos in https://github.com/ossf/scorecard-action/pull/1229
• 📖 Add package comments. by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1221
• 📖 Add SECURITY.md file by @​david-a-wheeler in https://github.com/ossf/scorecard-action/pull/1250
• 📖 Fix typo in token input docs by @​aabouzaid in https://github.com/ossf/scorecard-action/pull/1258

New Contributors

• @​david-a-wheeler made their first contribution in https://github.com/ossf/scorecard-action/pull/1250
• @​aabouzaid made their first contribution in https://github.com/ossf/scorecard-action/pull/1258

Full Changelog: ossf/scorecard-action@v2.2.0...v2.3.0

step-security/harden-runner (step-security/harden-runner)

v2.6.0

Compare Source

What's Changed

Release v2.6.0 by @​varunsh-coder in https://github.com/step-security/harden-runner/pull/346

This release adds support for self-hosted Virtual Machine runners (e.g. on EC2).

• Both ephemeral and persistent self-hosted VM runners are supported
• Documentation: https://docs.stepsecurity.io/harden-runner/how-tos/enable-runtime-security-vm

Full Changelog: step-security/harden-runner@v2...v2.6.0

---

Configuration

📅 Schedule: Branch creation - "before 4am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.