Update github-actions (#82)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/ci.yml

@@ -12,7 +12,7 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
+      - uses: step-security/harden-runner@41d3351872a2104cca2e1c0c05eae533d14f3967
         with:
           disable-sudo: true
           egress-policy: block
@@ -34,7 +34,7 @@ jobs:
 
       # Linting
       - name: Linting
-        uses: golangci/golangci-lint-action@456fc0f7358ebf6cdd48ca0d2d56e88a6c7aa077
+        uses: golangci/golangci-lint-action@7b561e5ab6624d4582c82a4315e0d65ec7a6ad00
         with:
           version: latest
           args: --config=./.github/.golangci.yml ./...
@@ -48,7 +48,7 @@ jobs:
       matrix:
         go: [ '1.22', '1.21' ]
     steps:
-      - uses: step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
+      - uses: step-security/harden-runner@41d3351872a2104cca2e1c0c05eae533d14f3967
         with:
           disable-sudo: true
           egress-policy: block
@@ -75,7 +75,7 @@ jobs:
     name: Analyze
     runs-on: ubuntu-latest
     steps:
-      - uses: step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
+      - uses: step-security/harden-runner@41d3351872a2104cca2e1c0c05eae533d14f3967
         with:
           disable-sudo: true
           egress-policy: block
@@ -106,15 +106,15 @@ jobs:
 
       # Codecov
       - name: Codecov
-        uses: codecov/codecov-action@1fecca8ce3a22284e70b371077fb5219f54095b8
+        uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574
         env:
           CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
         with:
           file: .github/coverage.out
 
       # Sonar
       - name: SonarCloud Scan
-        uses: SonarSource/sonarcloud-github-action@f1700773ebdb6efe6b3f8a5cf66150027dda8f5e
+        uses: SonarSource/sonarcloud-github-action@ffc3010689be73b8e5ae0c57ce35968afd7909e8
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

.github/workflows/codeql.yml

@@ -23,7 +23,7 @@ jobs:
       fail-fast: false
 
     steps:
-      - uses: step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
+      - uses: step-security/harden-runner@41d3351872a2104cca2e1c0c05eae533d14f3967
         with:
           disable-sudo: true
           egress-policy: block
@@ -35,12 +35,12 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ff79de67cc25c7617163ae1e4b8aa23b902fdf15
+        uses: github/codeql-action/init@83923549f688e42b34d0b90ee94725f7c30532fc
         with:
           languages: go
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@ff79de67cc25c7617163ae1e4b8aa23b902fdf15
+        uses: github/codeql-action/autobuild@83923549f688e42b34d0b90ee94725f7c30532fc
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ff79de67cc25c7617163ae1e4b8aa23b902fdf15
+        uses: github/codeql-action/analyze@83923549f688e42b34d0b90ee94725f7c30532fc

.github/workflows/scorecards.yml

@@ -22,7 +22,7 @@ jobs:
       id-token: write
 
     steps:
-      - uses: step-security/harden-runner@a22641e386edd6104ead99416bac876f4d9b806d
+      - uses: step-security/harden-runner@41d3351872a2104cca2e1c0c05eae533d14f3967
         with:
           disable-sudo: true
           egress-policy: block
@@ -69,6 +69,6 @@ jobs:
 
       # required for Code scanning alerts
       - name: "Upload SARIF results to code scanning"
-        uses: github/codeql-action/upload-sarif@ff79de67cc25c7617163ae1e4b8aa23b902fdf15
+        uses: github/codeql-action/upload-sarif@83923549f688e42b34d0b90ee94725f7c30532fc
         with:
           sarif_file: results.sarif