Bump the github-owned-actions group with 6 updates (#59)

Author: dependabot[bot]

.github/workflows/_scorecard.yml

@@ -37,6 +37,6 @@ jobs:
           path: results.sarif
           retention-days: 5
       - name: 📦 upload sarif results
-        uses: github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.3
+        uses: github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
         with:
           sarif_file: results.sarif

.github/workflows/_stale.yml

@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: 📆 mark stale activity
-        uses: actions/stale@3a9db7e6a41a89f618792c92c0e97cc736e1b13f # v10.0.0
+        uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
         with:
           repo-token: ${{ secrets.BLOOMBERG_OSS_USER_TOKEN_READ }}
           days-before-stale: ${{ inputs.days-until-stale }}

.github/workflows/clean-owners.yml

@@ -18,7 +18,7 @@ jobs:
         issues: write
     steps:
       - name: 🧼 clean codeowners
-        uses: github/cleanowners@687c79962d8efe42ed9572d228c13a43d460d13d # v1.2.6
+        uses: github/cleanowners@5128e4614bd2f1820cdc670392eb5d6a365b3b64 # v1.2.9
         env:
           GH_TOKEN: ${{ secrets.BLOOMBERG_OSS_USER_TOKEN_READ }}
           ORGANIZATION: bloomberg

.github/workflows/contributor-report.yml

@@ -36,7 +36,7 @@ jobs:
           echo "START_DATE=$START_DATE" >> "$GITHUB_ENV"
           echo "END_DATE=$END_DATE" >> "$GITHUB_ENV"
       - name: 📰 run contributors action
-        uses: github/contributors@a274afd4ff1bd4d115a0163207db2603c8733149 # v1.7.1
+        uses: github/contributors@2685bb003d6b9eecde35e82bb1bd1df4dfb7be08 # v1.7.4
         env:
           GH_TOKEN: ${{ secrets.BLOOMBERG_OSS_USER_TOKEN_READ }}
           START_DATE: ${{ env.START_DATE }}

.github/workflows/dependency-review.yml

@@ -20,7 +20,7 @@ jobs:
             egress-policy: audit
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 🔂 dependency review
-        uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3
+        uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1
         with:
             deny-licenses: AGPL-3.0
             fail-on-severity: moderate

.github/workflows/evergreen-check.yml

@@ -32,7 +32,7 @@ jobs:
       #     # Create env variable for next step
       #     echo "ONE_WEEK_AGO=$PREVIOUS_DATE" >> "$GITHUB_ENV"
       - name: 🌲 evergreen check
-        uses: github/evergreen@4e2fef1a4c2344c0ba63451f31705158d112a141 # v1.24.2
+        uses: github/evergreen@de85d31b3656847d97c180ac572307b401ec0776 # v1.24.5
         env:
           GH_TOKEN: ${{ secrets.BLOOMBERG_OSS_USER_TOKEN_READ }}
           ORGANIZATION: bloomberg