chore(deps): update all github actions (#1297)

This PR contains the following updates:

| Package | Type | Update | Change | OpenSSF |
|---|---|---|---|---|
| [docker/login-action](https://redirect.github.com/docker/login-action)
| action | minor | `v4.1.0` → `v4.2.0` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/docker/login-action/badge)](https://securityscorecards.dev/viewer/?uri=github.com/docker/login-action)
|
|
[docker/metadata-action](https://redirect.github.com/docker/metadata-action)
| action | minor | `v6.0.0` → `v6.1.0` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/docker/metadata-action/badge)](https://securityscorecards.dev/viewer/?uri=github.com/docker/metadata-action)
|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v4.35.5` → `v4.36.0` | [![OpenSSF
Scorecard](https://api.securityscorecards.dev/projects/github.com/github/codeql-action/badge)](https://securityscorecards.dev/viewer/?uri=github.com/github/codeql-action)
|

---

### Release Notes

<details>
<summary>docker/login-action (docker/login-action)</summary>

###
[`v4.2.0`](https://redirect.github.com/docker/login-action/releases/tag/v4.2.0)

[Compare
Source](https://redirect.github.com/docker/login-action/compare/v4.1.0...v4.2.0)

- Bump [@&#8203;actions/core](https://redirect.github.com/actions/core)
from 3.0.0 to 3.0.1 in
[#&#8203;976](https://redirect.github.com/docker/login-action/pull/976)
- Bump
[@&#8203;aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr)
and
[@&#8203;aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public)
to 3.1050.0 in
[#&#8203;960](https://redirect.github.com/docker/login-action/pull/960)
- Bump
[@&#8203;docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit)
from 0.86.0 to 0.90.0 in
[#&#8203;970](https://redirect.github.com/docker/login-action/pull/970)
- Bump brace-expansion from 2.0.1 to 5.0.6 in
[#&#8203;993](https://redirect.github.com/docker/login-action/pull/993)
- Bump fast-xml-builder from 1.1.4 to 1.2.0 in
[#&#8203;985](https://redirect.github.com/docker/login-action/pull/985)
- Bump fast-xml-parser from 5.3.6 to 5.8.0 in
[#&#8203;963](https://redirect.github.com/docker/login-action/pull/963)
- Bump http-proxy-agent and https-proxy-agent to 9.0.0 in
[#&#8203;961](https://redirect.github.com/docker/login-action/pull/961)
- Bump postcss from 8.5.6 to 8.5.10 in
[#&#8203;979](https://redirect.github.com/docker/login-action/pull/979)
- Bump tar from 6.2.1 to 7.5.15 in
[#&#8203;991](https://redirect.github.com/docker/login-action/pull/991)
- Bump vite from 7.3.1 to 7.3.3 in
[#&#8203;986](https://redirect.github.com/docker/login-action/pull/986)

**Full Changelog**:
<docker/login-action@v4.1.0...v4.2.0>

</details>

<details>
<summary>docker/metadata-action (docker/metadata-action)</summary>

###
[`v6.1.0`](https://redirect.github.com/docker/metadata-action/compare/v6.0.0...v6.1.0)

[Compare
Source](https://redirect.github.com/docker/metadata-action/compare/v6.0.0...v6.1.0)

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v4.36.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.36.0)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.35.5...v4.36.0)

- *Breaking change*: Bump the minimum required CodeQL bundle version to
2.19.4.
[#&#8203;3894](https://redirect.github.com/github/codeql-action/pull/3894)
- Add support for SHA-256 Git object IDs.
[#&#8203;3893](https://redirect.github.com/github/codeql-action/pull/3893)
- Update default CodeQL bundle version to
[2.25.5](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5).
[#&#8203;3926](https://redirect.github.com/github/codeql-action/pull/3926)

</details>

---

### Configuration

📅 **Schedule**: (in timezone Europe/Dublin)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - Only on Sunday and Saturday (`* * * * 0,6`)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/BSStudio/robonaut-server).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xODUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE4NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/docker.yml

@@ -32,14 +32,14 @@ jobs:
       security-events: write
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ github.token }}
       - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
       - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
-      - uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
+      - uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
         id: meta
         env:
           DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index
@@ -79,7 +79,7 @@ jobs:
           severity-cutoff: 'high'
           fail-build: false
 
-      - uses: github/codeql-action/upload-sarif@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+      - uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
         if: ${{ github.event_name != 'pull_request' && github.event_name != 'merge_group' }}
         with:
           sarif_file: ${{ steps.scan.outputs.sarif }}

.github/workflows/scorecard.yml

@@ -75,6 +75,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4.35.5
+        uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
         with:
           sarif_file: results.sarif