chore(deps): update github-actions

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-node	action	patch	v3.8.1 -> v3.8.2
actions/setup-node	action	digest	5e21ff4 -> 1a4442c
github/codeql-action	action	patch	v2.22.4 -> v2.22.8
google-github-actions/auth	action	minor	v1.1.1 -> v1.3.0
gradle/gradle-build-action	action	minor	v2.9.0 -> v2.10.0
ossf/scorecard-action	action	patch	v2.3.0 -> v2.3.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/setup-node (actions/setup-node)

v3.8.2

Compare Source

What's Changed

• Update semver by @​dmitry-shibanov in https://github.com/actions/setup-node/pull/861
• Update temp directory creation by @​nikolai-laevskii in https://github.com/actions/setup-node/pull/859
• Bump @​babel/traverse from 7.15.4 to 7.23.2 by @​dependabot in https://github.com/actions/setup-node/pull/870
• Add notice about binaries not being updated yet by @​nikolai-laevskii in https://github.com/actions/setup-node/pull/872
• Update toolkit cache and core by @​dmitry-shibanov and @​seongwon-privatenote in https://github.com/actions/setup-node/pull/875

Full Changelog: actions/setup-node@v3...v3.8.2

github/codeql-action (github/codeql-action)

v2.22.8

Compare Source

v2.22.7

Compare Source

v2.22.6

Compare Source

v2.22.5

Compare Source

google-github-actions/auth (google-github-actions/auth)

v1.3.0

Compare Source

What's Changed

• Revert back to Node 16 for v1 series by @​sethvargo in https://github.com/google-github-actions/auth/pull/356
• Release: v1.3.0 by @​google-github-actions-bot in https://github.com/google-github-actions/auth/pull/357

Full Changelog: google-github-actions/auth@v1...v1.3.0

v1.2.0

Compare Source

⚠️ This version requires Node 20 or later on the runner! If you are using GitHub-managed runners, no action is needed. If you are using self-hosted runners, make sure the system version of Node is version 20 or higher.

What's Changed

• Update deps by @​sethvargo in https://github.com/google-github-actions/auth/pull/312
• dependabot: only do security updates by @​sethvargo in https://github.com/google-github-actions/auth/pull/320
• update all deps by @​sethvargo in https://github.com/google-github-actions/auth/pull/321
• Update README.md by @​mattseymour in https://github.com/google-github-actions/auth/pull/332
• Update deps to Node 20 by @​sethvargo in https://github.com/google-github-actions/auth/pull/339
• Drop chai and mocha deps by @​sethvargo in https://github.com/google-github-actions/auth/pull/342
• Switch to more resilient testing by @​sethvargo in https://github.com/google-github-actions/auth/pull/343
• Build latest versions by @​sethvargo in https://github.com/google-github-actions/auth/pull/345
• Release: v1.2.0 by @​google-github-actions-bot in https://github.com/google-github-actions/auth/pull/346

New Contributors

• @​mattseymour made their first contribution in https://github.com/google-github-actions/auth/pull/332

Full Changelog: google-github-actions/auth@v1...v1.2.0

gradle/gradle-build-action (gradle/gradle-build-action)

v2.10.0

Compare Source

This release introduces a new artifact-retention-days parameter, which allows a user to configure how long the generated dependency-graph artifacts are retained by GitHub Actions. Adjusting the retention period can be useful to reduce storage costs associated with these dependency-graph artifacts.

See the documentation for more details.

Changelog

• [NEW] Add artifact-retention-days configuration parameter #​903
• [FIX] Update to v1.0.0 of the github-dependency-graph-gradle-plugin
• [FIX] Update @babel/traverse to address reported security vulnerability

Full-changelog: gradle/gradle-build-action@v2.9.0...v2.10.0

ossf/scorecard-action (ossf/scorecard-action)

v2.3.1

Compare Source

What's Changed

• 🌱 Bump github.com/ossf/scorecard/v4 from v4.13.0 to v4.13.1 by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/1282
  • Adds additional Fuzzing detection and fixes a SAST bug related to detecting CodeQL. For a full changelist of what this includes, see the v4.13.1 release notes

Full Changelog: ossf/scorecard-action@v2.3.0...v2.3.1

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.