bump minor dependencies

[pberthonneau]

• Rename yaml into yml
• Add scenario validation
• move transition shell out of asset folder
• mention katacoda workflow
• Create codeql-analysis.yml
• Update codeql-analysis.yml
• no change
• bum dependencies
• bump minor dependencies

Proposed changes

Describe the big picture of your changes here to communicate to the maintainers why we should accept this pull request. If it fixes a bug or resolves a feature request, be sure to link to that issue.

Types of changes

What types of changes does your code introduce to Online DevOps Dojo? Put an x in the boxes that apply

• [ ] Bug fix (non-breaking change which fixes an issue)
• [ ] New feature (non-breaking change which adds functionality)
• [ ] Code style update (formatting, renaming)
• [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
• [ ] Workflow change
• [ ] Documentation update (if none of the other choices apply)

Checklist

Put an x in the boxes that apply. You can also fill these out after creating the PR. If you're unsure about any of them, don't hesitate to ask. We're here to help! This is simply a reminder of what we are going to look for before merging your code.

• [ ] I have read the CONTRIBUTING doc.
• [ ] Lint passes locally with my changes.
• [ ] I have added necessary documentation (if appropriate).
• [ ] Any dependent changes have been merged and published in downstream modules

Further comments

If this is a relatively large or complex change, kick off the discussion by explaining why you chose the solution you did and what alternatives you considered, etc...

[pberthonneau]

Strange, I was merging a PR into my fork. Don't remember having created this PR yet. I cannot revert to draft, then I'm closing it for now and will test first. A goal would be to use the new GitHub environments to host both set of secrets on this repo and remove the dependency with my fork for tests.