chore(deps): update digest updates (github-actions)

Author: renovate[bot]

.github/workflows/build-scan-push.yml

@@ -195,7 +195,7 @@ jobs:
 
       - name: Upload SARIF to GitHub Security
         if: always() && hashFiles(format('{0}-results.sarif', matrix.scanner)) != ''
-        uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4
+        uses: github/codeql-action/upload-sarif@e46ed2cbd01164d986452f91f178727624ae40d7 # v4
         with:
           sarif_file: ${{ matrix.scanner }}-results.sarif
           category: ${{ matrix.scanner }}
@@ -268,7 +268,7 @@ jobs:
 
       - name: Generate Release Notes
         id: notes
-        uses: release-drafter/release-drafter@5de93583980a40bd78603b6dfdcda5b4df377b32 # v7
+        uses: release-drafter/release-drafter@563bf132657a13ded0b01fcb723c5a58cdd824e2 # v7
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}