chore(deps): update github-actions (#338)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://github.com/github/codeql-action)
| action | patch | `v3.28.9` -> `v3.28.10` |
|
[taiki-e/install-action](https://github.com/taiki-e/install-action)
| action | patch | `v2.48.15` -> `v2.48.22` |

---

### Release Notes

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.28.10`](https://github.com/github/codeql-action/releases/tag/v3.28.10)

[Compare
Source](https://github.com/github/codeql-action/compare/v3.28.9...v3.28.10)

### CodeQL Action Changelog

See the [releases
page](https://github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

#### 3.28.10 - 21 Feb 2025

- Update default CodeQL bundle version to 2.20.5.
[#&#8203;2772](https://github.com/github/codeql-action/pull/2772)
- Address an issue where the CodeQL Bundle would occasionally fail to
decompress on macOS.
[#&#8203;2768](https://github.com/github/codeql-action/pull/2768)

See the full
[CHANGELOG.md](https://github.com/github/codeql-action/blob/v3.28.10/CHANGELOG.md)
for more information.

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.48.22`](https://github.com/taiki-e/install-action/releases/tag/v2.48.22):
2.48.22

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.48.21...v2.48.22)

-   Update `cargo-binstall@latest` to 1.11.1.

-   Update `release-plz@latest` to 0.3.122.

###
[`v2.48.21`](https://github.com/taiki-e/install-action/releases/tag/v2.48.21):
2.48.21

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.48.20...v2.48.21)

-   Update `wasmtime@latest` to 30.0.1.

-   Update `syft@latest` to 1.20.0.

###
[`v2.48.20`](https://github.com/taiki-e/install-action/releases/tag/v2.48.20):
2.48.20

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.48.19...v2.48.20)

-   Update `cargo-udeps@latest` to 0.1.55.

###
[`v2.48.19`](https://github.com/taiki-e/install-action/releases/tag/v2.48.19):
2.48.19

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.48.18...v2.48.19)

-   Update `typos@latest` to 1.29.9.

###
[`v2.48.18`](https://github.com/taiki-e/install-action/releases/tag/v2.48.18):
2.48.18

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.48.17...v2.48.18)

-   Update `cargo-deny@latest` to 0.17.0.

###
[`v2.48.17`](https://github.com/taiki-e/install-action/releases/tag/v2.48.17):
2.48.17

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.48.16...v2.48.17)

-   Update `wasmtime@latest` to 30.0.0.

###
[`v2.48.16`](https://github.com/taiki-e/install-action/releases/tag/v2.48.16):
2.48.16

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.48.15...v2.48.16)

-   Update `typos@latest` to 1.29.8.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 10pm on monday" in timezone
Asia/Shanghai, Automerge - "before 10pm on monday" in timezone
Asia/Shanghai.

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/eslint-plugin-oxlint).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNzYuMiIsInVwZGF0ZWRJblZlciI6IjM5LjE3Ni4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/ci_security.yml

@@ -27,7 +27,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: taiki-e/install-action@54b836426b3fa9aef432e760885ea0419ab50dab # v2.48.15
+      - uses: taiki-e/install-action@eb454bad93a35bbf86f7bf88a114beee8d0e08bd # v2.48.22
         with:
           tool: zizmor
 
@@ -37,7 +37,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
+        uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
         with:
           sarif_file: results.sarif
           category: zizmor