Merge pull request #77 from loadingalias/dependabot/github_actions/github-actions-2cd5c2f6fc

build(deps): bump the github-actions group across 1 directory with 2 updates

Author: loadingalias

.github/workflows/ci.yaml

@@ -37,7 +37,7 @@ jobs:
       - name: Build Plan (PR)
         if: github.event_name == 'pull_request'
         id: rail
-        uses: loadingalias/cargo-rail-action@f622a3936a231fe78a772292c6892d71e8c57f9f  # v6.1.0
+        uses: loadingalias/cargo-rail-action@ebc8ef2740efefe2cd5c42826344a8f1213113ae  # v6.1.2
         with:
           version: "0.20.0"
           checksum: required

.github/workflows/scorecard.yaml

@@ -35,6 +35,6 @@ jobs:
           publish_results: true
 
       - name: Upload SARIF
-        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81  # v4.37.3
+        uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38  # v4.37.4
         with:
           sarif_file: scorecard.sarif