chore(deps): update actions/dependency-review-action action to v4.2.4

[renovate[bot]]

This PR contains the following updates:

Package	Type	Update	Change
actions/dependency-review-action	action	patch	v4.2.3 -> v4.2.4

---

Release Notes

actions/dependency-review-action (actions/dependency-review-action)

### [`v4.2.4`](https://togithub.com/actions/dependency-review-action/releases/tag/v4.2.4) [Compare Source](https://togithub.com/actions/dependency-review-action/compare/v4.2.3...v4.2.4) #### What's Changed Fixed a bug in the output of OpenSSF cards for GitHub Actions. #### New Contributors - [@​sporkmonger](https://togithub.com/sporkmonger) made their first contribution in [https://github.com/actions/dependency-review-action/pull/721](https://togithub.com/actions/dependency-review-action/pull/721) **Full Changelog**: https://github.com/actions/dependency-review-action/compare/v4.2.3...v4.2.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions[bot]]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
actions/actions/dependency-review-action	733dd5d4a5203f238c33806593ec0f5fc5343d8c	:green_circle: 6.2	Details Check Score Reason Code-Review :green_circle: 6 found 1 unreviewed changesets out of 3 -- score normalized to 6 Maintained :green_circle: 10 30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Signed-Releases :warning: -1 no releases found Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Packaging :warning: -1 packaging workflow not detected Security-Policy :green_circle: 9 security policy file detected Branch-Protection :warning: 0 branch protection not enabled on development/release branches Binary-Artifacts :green_circle: 10 no binaries found in the repo Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Fuzzing :warning: 0 project is not fuzzed SAST :green_circle: 10 SAST tool is run on all commits Pinned-Dependencies :warning: 1 dependency not pinned by hash detected -- score normalized to 1 Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected
actions/actions/dependency-review-action	0fa40c3c10055986a88de3baa0d6ec17c5a894b3	:green_circle: 6.2	Details Check Score Reason Code-Review :green_circle: 6 found 1 unreviewed changesets out of 3 -- score normalized to 6 Maintained :green_circle: 10 30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices :warning: 0 no effort to earn an OpenSSF best practices badge detected License :green_circle: 10 license file detected Signed-Releases :warning: -1 no releases found Dangerous-Workflow :green_circle: 10 no dangerous workflow patterns detected Packaging :warning: -1 packaging workflow not detected Security-Policy :green_circle: 9 security policy file detected Branch-Protection :warning: 0 branch protection not enabled on development/release branches Binary-Artifacts :green_circle: 10 no binaries found in the repo Token-Permissions :warning: 0 detected GitHub workflow tokens with excessive permissions Fuzzing :warning: 0 project is not fuzzed SAST :green_circle: 10 SAST tool is run on all commits Pinned-Dependencies :warning: 1 dependency not pinned by hash detected -- score normalized to 1 Vulnerabilities :green_circle: 10 0 existing vulnerabilities detected

Scanned Manifest Files

.github/workflows/dependency-review.yml

• actions/dependency-review-action@733dd5d4a5203f238c33806593ec0f5fc5343d8c
• actions/dependency-review-action@0fa40c3c10055986a88de3baa0d6ec17c5a894b3

[renovate[bot]]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.