chore(deps): update github-actions

[renovate[bot]]

This PR contains the following updates:

Package	Type	Update	Change
actions/download-artifact	action	patch	v4.1.1 -> v4.1.2
actions/upload-artifact	action	patch	v4.3.0 -> v4.3.1
github/codeql-action	action	minor	v3.23.2 -> v3.24.0

---

Release Notes

actions/download-artifact (actions/download-artifact)

### [`v4.1.2`](https://togithub.com/actions/download-artifact/releases/tag/v4.1.2) [Compare Source](https://togithub.com/actions/download-artifact/compare/v4.1.1...v4.1.2) - Bump [@​actions/artifacts](https://togithub.com/actions/artifacts) to latest version to include [updated GHES host check](https://togithub.com/actions/toolkit/pull/1648)

actions/upload-artifact (actions/upload-artifact)

### [`v4.3.1`](https://togithub.com/actions/upload-artifact/releases/tag/v4.3.1) [Compare Source](https://togithub.com/actions/upload-artifact/compare/v4.3.0...v4.3.1) - Bump [@​actions/artifacts](https://togithub.com/actions/artifacts) to latest version to include [updated GHES host check](https://togithub.com/actions/toolkit/pull/1648)

github/codeql-action (github/codeql-action)

### [`v3.24.0`](https://togithub.com/github/codeql-action/compare/v3.23.2...v3.24.0) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.23.2...v3.24.0)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions[bot]]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	4		0	0.03s
✅ DOCKERFILE	hadolint	2		0	0.09s
✅ EDITORCONFIG	editorconfig-checker	67		0	0.31s
✅ GROOVY	npm-groovy-lint	2		0	11.93s
✅ JAVA	checkstyle	18		0	5.09s
✅ JSON	eslint-plugin-jsonc	5		0	2.43s
✅ JSON	jsonlint	5		0	0.28s
✅ JSON	prettier	5		0	2.27s
✅ JSON	v8r	5		0	3.29s
✅ MARKDOWN	markdownlint	2		0	0.94s
✅ PYTHON	bandit	1		0	0.98s
✅ PYTHON	black	1		0	0.65s
✅ PYTHON	flake8	1		0	0.43s
✅ PYTHON	isort	1		0	0.35s
✅ PYTHON	mypy	1		0	7.06s
✅ PYTHON	ruff	1		0	0.04s
✅ REPOSITORY	checkov	yes		no	14.72s
✅ REPOSITORY	gitleaks	yes		no	1.0s
✅ REPOSITORY	git_diff	yes		no	0.04s
✅ REPOSITORY	grype	yes		no	12.5s
✅ REPOSITORY	kics	yes		no	5.44s
✅ REPOSITORY	secretlint	yes		no	1.15s
✅ REPOSITORY	syft	yes		no	0.33s
✅ REPOSITORY	trivy	yes		no	7.87s
✅ REPOSITORY	trivy-sbom	yes		no	5.55s
✅ REPOSITORY	trufflehog	yes		no	8.86s
✅ SQL	sql-lint	1		0	0.35s
✅ XML	xmllint	1		0	0.02s
✅ YAML	prettier	17		0	1.23s
✅ YAML	yamllint	17		0	0.57s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

• Click here to request the new flavor

_MegaLinter is graciously provided by _

[miracum-bot]

:tada: This PR is included in version 3.12.9 :tada:

The release is available on GitHub release

Your semantic-release bot :package::rocket: