chore(deps): update github-actions deps

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/download-artifact	action	minor	v4.2.1 -> v4.3.0
anchore/sbom-action	action	minor	v0.18.0 -> v0.19.0
docker/build-push-action	action	minor	v6.15.0 -> v6.16.0
github/codeql-action	action	patch	v3.28.15 -> v3.28.16

---

Release Notes

actions/download-artifact (actions/download-artifact)

v4.3.0

Compare Source

What's Changed

• feat: implement new artifact-ids input by @​GrantBirki in https://github.com/actions/download-artifact/pull/401
• Fix workflow example for downloading by artifact ID by @​joshmgross in https://github.com/actions/download-artifact/pull/402
• Prep for v4.3.0 release by @​robherley in https://github.com/actions/download-artifact/pull/404

New Contributors

• @​GrantBirki made their first contribution in https://github.com/actions/download-artifact/pull/401

Full Changelog: actions/download-artifact@v4.2.1...v4.3.0

anchore/sbom-action (anchore/sbom-action)

v0.19.0

Compare Source

Changes in v0.19.0

• chore(deps): update Syft to v1.23.0 (#​521)
• chore(deps): bump peter-evans/create-pull-request from 7.0.6 to 7.0.8 (#​519)
• chore(deps): bump cross-spawn (#​514)

docker/build-push-action (docker/build-push-action)

v6.16.0

Compare Source

• Handle no default attestations env var by @​crazy-max in https://github.com/docker/build-push-action/pull/1343
• Only print secret keys in build summary output by @​crazy-max in https://github.com/docker/build-push-action/pull/1353
• Bump @​docker/actions-toolkit from 0.56.0 to 0.59.0 in https://github.com/docker/build-push-action/pull/1352

Full Changelog: docker/build-push-action@v6.15.0...v6.16.0

github/codeql-action (github/codeql-action)

v3.28.16

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.16 - 23 Apr 2025

• Update default CodeQL bundle version to 2.21.1. #​2863

See the full CHANGELOG.md for more information.

---

Configuration

📅 Schedule: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.