Dependabot version bumps

[burythehammer]

A number of vulnerabilities raised from dependabot so merging these all together and pushing at once

[kaplanben]

Checkmarx One – Scan Summary & Details – 7b8982c2-ce17-433b-b4aa-18176eaf2eb2

New Issues (4)

Checkmarx found the following issues in this Pull Request

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2025-27144	Go-github.com/go-jose/go-jose/v4-v4.0.4	details Recommended version: v4.0.5 Description: Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryptio... Attack Vector: NETWORK Attack Complexity: LOW ID: UUXjOtljtqneYV88AB4dwmiUjOeNiQCqcXfNjfSbvjM%3D Vulnerable Package
	Unpinned Actions Full Length Commit SHA	/codeql-analysis.yml: 43	details Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help... ID: QOmNDaPI10zdq5A%2B7Q3SMmedFpM%3D
	Unpinned Actions Full Length Commit SHA	/codeql-analysis.yml: 54	details Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help... ID: QzkOUP3GKW7c506ivbxv1%2FaH86s%3D
	Unpinned Actions Full Length Commit SHA	/codeql-analysis.yml: 68	details Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help... ID: l617fWgphdym8p5%2BEKEm4oEyea4%3D

Fixed Issues (7)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Cxdbd5c98e-4380	Go-github.com/cloudflare/circl-v1.3.7
	CVE-2024-45339	Go-github.com/golang/glog-v1.2.2
	CVE-2025-22869	Go-golang.org/x/crypto-v0.33.0
	CVE-2025-22872	Go-golang.org/x/net-v0.35.0
	Unpinned Actions Full Length Commit SHA	/codeql-analysis.yml: 42
	Unpinned Actions Full Length Commit SHA	/codeql-analysis.yml: 53
	Unpinned Actions Full Length Commit SHA	/codeql-analysis.yml: 67