chore(deps): update all non-major dependencies in .github/workflows/scorecard.yml

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
actions/upload-artifact	action	patch	v4.4.0 -> v4.4.1
docker/setup-buildx-action	action	minor	v3.6.1 -> v3.7.1
github/codeql-action	action	patch	v3.26.9 -> v3.26.11

---

Release Notes

actions/upload-artifact (actions/upload-artifact)

v4.4.1

Compare Source

What's Changed

• Add a section about hidden files by @​joshmgross in https://github.com/actions/upload-artifact/pull/607
• Add workflow file for publishing releases to immutable action package by @​Jcambass in https://github.com/actions/upload-artifact/pull/621
• Update @​actions/artifact to latest version, includes symlink and timeout fixes by @​robherley in https://github.com/actions/upload-artifact/pull/625

New Contributors

• @​Jcambass made their first contribution in https://github.com/actions/upload-artifact/pull/621

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

docker/setup-buildx-action (docker/setup-buildx-action)

v3.7.1

Compare Source

• Switch back to uuid package by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/369

Full Changelog: docker/setup-buildx-action@v3.7.0...v3.7.1

v3.7.0

Compare Source

• Always set buildkitd-flags if opt-in by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/363
• Remove uuid package and switch to crypto by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/366
• Bump @​docker/actions-toolkit from 0.35.0 to 0.39.0 in https://github.com/docker/setup-buildx-action/pull/362
• Bump path-to-regexp from 6.2.2 to 6.3.0 in https://github.com/docker/setup-buildx-action/pull/354

Full Changelog: docker/setup-buildx-action@v3.6.1...v3.7.0

github/codeql-action (github/codeql-action)

v3.26.11

Compare Source

v3.26.10

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.