chore(deps): update workflows

.github/workflows/scorecard.yml

@@ -59,7 +59,7 @@ jobs:
  # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
  # format to the repository Actions tab.
  - name: 'Upload artifact'
- uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+ uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
  with:
  name: SARIF file
  path: results.sarif
@@ -68,6 +68,6 @@ jobs:
  # Upload the results to GitHub's code scanning dashboard (optional).
  # Commenting out will disable upload of results to your repo's Code Scanning dashboard
  - name: 'Upload to code-scanning'
- uses: github/codeql-action/upload-sarif@f0f3afee809481da311ca3a6ff1ff51d81dbeb24 # v3.26.4
+ uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
  with:
  sarif_file: results.sarif

.github/workflows/semantic.yml

@@ -42,14 +42,14 @@ jobs:
  - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
  with:
  persist-credentials: false
- - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
+ - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
  with:
  python-version: '3.10'
  - run: dpkg --version
  - run: python3 generators/generate-debian-versions.py
  - run: git status
  - run: stat debian-db.zip
- - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+ - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
  with:
  name: generated-debian-versions
  path: pkg/semantic/fixtures/debian-versions-generated.txt
@@ -73,7 +73,7 @@ jobs:
  extensions: zip
  - run: php generators/generate-packagist-versions.php
  - run: git status
- - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+ - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
  with:
  name: generated-packagist-versions
  path: pkg/semantic/fixtures/packagist-versions-generated.txt
@@ -86,14 +86,14 @@ jobs:
  - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
  with:
  persist-credentials: false
- - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
+ - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
  with:
  python-version: '3.10'
  - name: setup dependencies
  run: pip install packaging==21.3
  - run: python3 generators/generate-pypi-versions.py
  - run: git status
- - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+ - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
  with:
  name: generated-pypi-versions
  path: pkg/semantic/fixtures/pypi-versions-generated.txt
@@ -113,7 +113,7 @@ jobs:
  run: gem install rubyzip
  - run: ruby generators/generate-rubygems-versions.rb
  - run: git status
- - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+ - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
  with:
  name: generated-rubygems-versions
  path: pkg/semantic/fixtures/rubygems-versions-generated.txt
@@ -139,7 +139,7 @@ jobs:
  -o generators/lib/maven-artifact-3.8.5.jar
  - run: java -cp 'generators/lib/*' generators/GenerateMavenVersions.java
  - run: git status
- - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+ - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
  with:
  name: generated-maven-versions
  path: pkg/semantic/fixtures/maven-versions-generated.txt
@@ -157,7 +157,7 @@ jobs:
  r-version: '3.5.3'
  - run: Rscript generators/generate-cran-versions.R
  - run: git status
- - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
+ - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
  with:
  name: generated-cran-versions
  path: pkg/semantic/fixtures/cran-versions-generated.txt