chore(deps): update weekly update

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/create-github-app-token	action	patch	v1.11.6 -> v1.11.7
actions/upload-artifact	action	patch	v4.6.1 -> v4.6.2
fossas/fossa-action	action	minor	v1.5.0 -> v1.6.0
github/codeql-action	action	patch	v3.28.11 -> v3.28.12

---

Release Notes

actions/create-github-app-token (actions/create-github-app-token)

v1.11.7

Compare Source

Bug Fixes

• deps: bump undici from 5.28.4 to 7.5.0 (#​214) (a24b46a)

actions/upload-artifact (actions/upload-artifact)

v4.6.2

Compare Source

What's Changed

• Update to use artifact 2.3.2 package & prepare for new upload-artifact release by @​salmanmkc in https://github.com/actions/upload-artifact/pull/685

New Contributors

• @​salmanmkc made their first contribution in https://github.com/actions/upload-artifact/pull/685

Full Changelog: actions/upload-artifact@v4...v4.6.2

fossas/fossa-action (fossas/fossa-action)

v1.6.0

Compare Source

What's Changed

• Upgrade node to v20 by @​jssblck in https://github.com/fossas/fossa-action/pull/60
• Update dependencies, enable auto dependabot by @​jssblck in https://github.com/fossas/fossa-action/pull/61

Full Changelog: fossas/fossa-action@v1.5.0...v1.6.0

github/codeql-action (github/codeql-action)

v3.28.12

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.12 - 19 Mar 2025

• Dependency caching should now cache more dependencies for Java build-mode: none extractions. This should speed up workflows and avoid inconsistent alerts in some cases.
• Update default CodeQL bundle version to 2.20.7. #​2810

See the full CHANGELOG.md for more information.

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.