chore(deps): update ci dependencies

[renovate[bot]]

This PR contains the following updates:

Package	Type	Update	Change
actions/attest-build-provenance	action	minor	v1.2.0 -> v1.3.0
github/codeql-action	action	patch	v3.25.9 -> v3.25.10

---

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

### [`v1.3.0`](https://togithub.com/actions/attest-build-provenance/releases/tag/v1.3.0) [Compare Source](https://togithub.com/actions/attest-build-provenance/compare/v1.2.0...v1.3.0) #### What's Changed - Bump actions/attest-build-provenance/predicate from 1.0.0 to 1.1.0 by [@​bdehamer](https://togithub.com/bdehamer) in [https://github.com/actions/attest-build-provenance/pull/116](https://togithub.com/actions/attest-build-provenance/pull/116) - Switch to new GH provenance [build type](https://actions.github.io/buildtypes/workflow/v1) - Bump actions/attest from 1.2.0 to 1.3.0 by [@​bdehamer](https://togithub.com/bdehamer) in [https://github.com/actions/attest-build-provenance/pull/116](https://togithub.com/actions/attest-build-provenance/pull/116) - Dynamic construction of GitHub API URLs based on GITHUB_SERVER_URL - Improved handling of Rekor 409 responses - Bugfix - detection of registries with support for the OCI referrers API **Full Changelog**: https://github.com/actions/attest-build-provenance/compare/v1.2.0...v1.3.0

github/codeql-action (github/codeql-action)

### [`v3.25.10`](https://togithub.com/github/codeql-action/compare/v3.25.9...v3.25.10) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.25.9...v3.25.10)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[jellyfin-bot]

Cloudflare Pages deployment

Latest commit	52ee455
Status	✅ Deployed!
Preview URL	https://d574b9c3.jf-vue.pages.dev
Type	🔀 Preview

View build logs View bot logs

[sonarcloud[bot]]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud