chore(deps): update all non-major dependencies in .github/workflows/scorecard.yml

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
actions/upload-artifact	action	minor	v4.5.0 -> v4.6.0
docker/setup-qemu-action	action	digest	49b3bc8 -> 53851d1
docker/setup-qemu-action	action	minor	v3.2.0 -> v3.3.0
github/codeql-action	action	patch	v3.28.0 -> v3.28.1

---

Release Notes

actions/upload-artifact (actions/upload-artifact)

v4.6.0

Compare Source

What's Changed

• Expose env vars to control concurrency and timeout by @​yacaovsnc in https://github.com/actions/upload-artifact/pull/662

Full Changelog: actions/upload-artifact@v4...v4.6.0

docker/setup-qemu-action (docker/setup-qemu-action)

v3.3.0

Compare Source

• Add cache-image input to enable/disable caching of binfmt image by @​crazy-max in https://github.com/docker/setup-qemu-action/pull/130
• Bump @​actions/core from 1.10.1 to 1.11.1 in https://github.com/docker/setup-qemu-action/pull/172
• Bump @​docker/actions-toolkit from 0.35.0 to 0.49.0 in https://github.com/docker/setup-qemu-action/pull/187
• Bump cross-spawn from 7.0.3 to 7.0.6 in https://github.com/docker/setup-qemu-action/pull/182
• Bump path-to-regexp from 6.2.2 to 6.3.0 in https://github.com/docker/setup-qemu-action/pull/162

Full Changelog: docker/setup-qemu-action@v3.2.0...v3.3.0

github/codeql-action (github/codeql-action)

v3.28.1

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.1 - 10 Jan 2025

• CodeQL Action v2 is now deprecated, and is no longer updated or supported. For better performance, improved security, and new features, upgrade to v3. For more information, see this changelog post. #​2677
• Update default CodeQL bundle version to 2.20.1. #​2678

See the full CHANGELOG.md for more information.

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.