chore(deps): update github-actions deps

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github/codeql-action	action	patch	v3.29.2 -> v3.29.3
sigstore/cosign-installer	action	patch	v3.9.1 -> v3.9.2

---

Release Notes

github/codeql-action (github/codeql-action)

v3.29.3

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.3 - 21 Jul 2025

No user facing changes.

See the full CHANGELOG.md for more information.

sigstore/cosign-installer (sigstore/cosign-installer)

v3.9.2

Compare Source

What's Changed

• not fail fast and setup permissions in https://github.com/sigstore/cosign-installer/pull/195
• drop old unsupported versions <v2.0.0 inhttps://github.com/sigstore/cosign-installer/pull/1922
• Update default to v2.5.3 in https://github.com/sigstore/cosign-installer/pull/196

Full Changelog: sigstore/cosign-installer@v3.9.1...v3.9.2

---

Configuration

📅 Schedule: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.