chore(deps): update github-actions (#75)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[Baker-scripts/.github](https://redirect.github.com/Baker-scripts/.github)
([changelog](https://redirect.github.com/Baker-scripts/.github/compare/401dae28479d6a8e4c63f3736e07225f94545083..01c10a0300ddea9ce38a5fb207306c85fa119998))
| workflow | digest | `401dae2` → `01c10a0` |
|
[actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
([changelog](https://redirect.github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a..cf430e030ddbb5b0abf93d22962f4752f3646cd9))
| action | digest | `043fb46` → `cf430e0` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
([changelog](https://redirect.github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2..24c54180a607b1449ed407dd24f251e4e9147c8d))
| action | digest | `2892aa5` → `24c5418` |

---

### Configuration

📅 **Schedule**: (in timezone America/Chicago)

- Branch creation
  - "before 6am on sunday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/baker-scripts/RedditModLog).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzQuMSIsInVwZGF0ZWRJblZlciI6IjQ0LjEzNC4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJyZW5vdmF0ZSJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/docker-build.yml

@@ -100,7 +100,7 @@ jobs:
 
       - name: Upload SBOM
         if: github.event_name != 'pull_request'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: sbom
           path: sbom.spdx.json
@@ -123,7 +123,7 @@ jobs:
           output: 'trivy-results.sarif'
 
       - name: Upload Trivy results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4
+        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4
         if: always()
         with:
           sarif_file: 'trivy-results.sarif'

.github/workflows/pre-commit.yml

@@ -9,4 +9,4 @@ name: Pre-commit
 
 jobs:
   pre-commit:
-    uses: Baker-scripts/.github/.github/workflows/pre-commit.yml@401dae28479d6a8e4c63f3736e07225f94545083 # main
+    uses: Baker-scripts/.github/.github/workflows/pre-commit.yml@01c10a0300ddea9ce38a5fb207306c85fa119998 # main