build: update scorecard action dependencies

[angular-robot]

This PR contains the following updates:

Package	Type	Update	Change
actions/upload-artifact	action	patch	v4.3.5 -> v4.3.6
github/codeql-action	action	minor	v3.25.15 -> v3.26.0

---

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/upload-artifact (actions/upload-artifact)

### [`v4.3.6`](https://togithub.com/actions/upload-artifact/releases/tag/v4.3.6) [Compare Source](https://togithub.com/actions/upload-artifact/compare/v4.3.5...v4.3.6) #### What's Changed - Revert to [@​actions/artifact](https://togithub.com/actions/artifact) 2.1.8 by [@​robherley](https://togithub.com/robherley) in [https://github.com/actions/upload-artifact/pull/594](https://togithub.com/actions/upload-artifact/pull/594) **Full Changelog**: https://github.com/actions/upload-artifact/compare/v4...v4.3.6

github/codeql-action (github/codeql-action)

### [`v3.26.0`](https://togithub.com/github/codeql-action/compare/v3.25.15...v3.26.0) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.25.15...v3.26.0)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[josephperrott]

This PR was merged into the repository by commit 3de4583fcef65f6188b0f22cd70bd41c27eb7283.

The changes were merged into the following branches: main

[angular-automatic-lock-bot[bot]]

This issue has been automatically locked due to inactivity. Please file a new issue if you are encountering a similar or related problem.

Read more about our automatic conversation locking policy.

_{This action has been performed automatically by a bot.}