chore: Update workflow actions

Author: bcessa

.github/dependabot.yml

@@ -23,6 +23,7 @@ updates:
     ignore:
       # Autogenerated proto files
       - dependency-name: "google.golang.org/genproto"
+      - dependency-name: "buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go"
       # Currently using our own fork at "github.com/bryk-io/cfssl"
       - dependency-name: "github.com/cloudflare/cfssl"
       # Avoid constant unstable releases
@@ -36,6 +37,8 @@ updates:
       - dependency-name: "go.opentelemetry.io/*"
       # Utility only used for testing
       - dependency-name: "github.com/stretchr/testify"
+      # Official Sentry library
+      - dependency-name: "github.com/getsentry/sentry-go"
     # Configure commit messages
     commit-message:
       # Prefix all commit messages with "dependencies"
@@ -47,4 +50,5 @@ updates:
       interval: "monthly"
     ignore:
       - dependency-name: "bufbuild/buf-action"
+      - dependency-name: "github/codeql-action"
       - dependency-name: "trufflesecurity/trufflehog"

.github/workflows/codeql.yml

@@ -52,7 +52,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
+        uses: github/codeql-action/init@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -62,7 +62,7 @@ jobs:
 
       # Auto build attempts to build any compiled languages  (C/C++, C#, or Java).
       - name: Auto build
-        uses: github/codeql-action/autobuild@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
+        uses: github/codeql-action/autobuild@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
 
       # Run manual build only if auto-build fails
       - name: Manual build
@@ -75,4 +75,4 @@ jobs:
       # Can be excluded if the commit message contains: [skip codeql]
       - name: Perform CodeQL analysis
         if: ${{ !contains(env.commit_msg, '[skip codeql]') }}
-        uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
+        uses: github/codeql-action/analyze@16140ae1a102900babc80a33c44059580f687047 # v4.30.9

.github/workflows/dependency-review.yml

@@ -26,4 +26,4 @@ jobs:
       # Scan dependencies
       # https://github.com/actions/dependency-review-action
       - name: Dependency review
-        uses: actions/dependency-review-action@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 # v4.8.0
+        uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1

.github/workflows/maintenance.yml

@@ -18,7 +18,7 @@ jobs:
           egress-policy: audit
 
       - name: Tag stale issues and PRs
-        uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0
+        uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
         with:
           # On the 'debug' mode the action will not perform any operation.
           # Add the secret ACTIONS_STEP_DEBUG with a value of 'true' in the repository.

.github/workflows/ossf-scorecard.yml

@@ -59,6 +59,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload results to code-scanning
-        uses: github/codeql-action/upload-sarif@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5
+        uses: github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
         with:
           sarif_file: results.sarif