chore(deps): update github-actions (#345)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://github.com/github/codeql-action)
| action | patch | `v3.28.10` -> `v3.28.11` |
|
[peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request)
| action | patch | `v7.0.7` -> `v7.0.8` |
|
[taiki-e/install-action](https://github.com/taiki-e/install-action)
| action | patch | `v2.49.10` -> `v2.49.17` |

---

### Release Notes

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v3.28.11`](https://github.com/github/codeql-action/releases/tag/v3.28.11)

[Compare
Source](https://github.com/github/codeql-action/compare/v3.28.10...v3.28.11)

### CodeQL Action Changelog

See the [releases
page](https://github.com/github/codeql-action/releases) for the
relevant changes to the CodeQL CLI and language packs.

#### 3.28.11 - 07 Mar 2025

- Update default CodeQL bundle version to 2.20.6.
[#&#8203;2793](https://github.com/github/codeql-action/pull/2793)

See the full
[CHANGELOG.md](https://github.com/github/codeql-action/blob/v3.28.11/CHANGELOG.md)
for more information.

</details>

<details>
<summary>peter-evans/create-pull-request
(peter-evans/create-pull-request)</summary>

###
[`v7.0.8`](https://github.com/peter-evans/create-pull-request/releases/tag/v7.0.8):
Create Pull Request v7.0.8

[Compare
Source](https://github.com/peter-evans/create-pull-request/compare/v7.0.7...v7.0.8)

#### What's Changed

- build(deps-dev): bump ts-jest from 29.2.5 to 29.2.6 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/peter-evans/create-pull-request/pull/3751](https://github.com/peter-evans/create-pull-request/pull/3751)
- build(deps-dev): bump eslint-import-resolver-typescript from 3.8.1 to
3.8.3 by [@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/peter-evans/create-pull-request/pull/3752](https://github.com/peter-evans/create-pull-request/pull/3752)
- build(deps): bump
[@&#8203;octokit/plugin-paginate-rest](https://github.com/octokit/plugin-paginate-rest)
from 11.4.2 to 11.4.3 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/peter-evans/create-pull-request/pull/3753](https://github.com/peter-evans/create-pull-request/pull/3753)
- build(deps-dev): bump prettier from 3.5.1 to 3.5.2 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/peter-evans/create-pull-request/pull/3754](https://github.com/peter-evans/create-pull-request/pull/3754)
- fix: suppress output for some git operations by
[@&#8203;peter-evans](https://github.com/peter-evans) in
[https://github.com/peter-evans/create-pull-request/pull/3776](https://github.com/peter-evans/create-pull-request/pull/3776)

**Full Changelog**:
peter-evans/create-pull-request@v7.0.7...v7.0.8

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.49.17`](https://github.com/taiki-e/install-action/releases/tag/v2.49.17):
2.49.17

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.49.16...v2.49.17)

-   Update `mdbook@latest` to 0.4.46.

-   Update `knope@latest` to 0.18.4.

-   Update `cargo-semver-checks@latest` to 0.40.0.

-   Update `cargo-binstall@latest` to 1.12.0.

###
[`v2.49.16`](https://github.com/taiki-e/install-action/releases/tag/v2.49.16):
2.49.16

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.49.15...v2.49.16)

-   Update `shfmt@latest` to 3.11.0.

-   Update `cargo-lambda@latest` to 1.7.1.

###
[`v2.49.15`](https://github.com/taiki-e/install-action/releases/tag/v2.49.15):
2.49.15

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.49.14...v2.49.15)

-   Update `release-plz@latest` to 0.3.125.

-   Update `protoc@latest` to 3.30.0.

###
[`v2.49.14`](https://github.com/taiki-e/install-action/releases/tag/v2.49.14):
2.49.14

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.49.13...v2.49.14)

-   Update `espup@latest` to 0.14.1.

###
[`v2.49.13`](https://github.com/taiki-e/install-action/releases/tag/v2.49.13):
2.49.13

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.49.12...v2.49.13)

-   Update `trunk@latest` to 0.21.8.

###
[`v2.49.12`](https://github.com/taiki-e/install-action/releases/tag/v2.49.12):
2.49.12

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.49.11...v2.49.12)

-   Update `cargo-tarpaulin@latest` to 0.32.2.

-   Update `typos@latest` to 1.30.1.

###
[`v2.49.11`](https://github.com/taiki-e/install-action/releases/tag/v2.49.11):
2.49.11

[Compare
Source](https://github.com/taiki-e/install-action/compare/v2.49.10...v2.49.11)

-   Update `cargo-tarpaulin@latest` to 0.32.1.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 10pm on monday" in timezone
Asia/Shanghai, Automerge - "before 10pm on monday" in timezone
Asia/Shanghai.

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/eslint-plugin-oxlint).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xODUuNCIsInVwZGF0ZWRJblZlciI6IjM5LjE4NS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/bump_oxlint.yml

@@ -41,7 +41,7 @@ jobs:
           OXLINT_VERSION: ${{ inputs.version }}
         run: npm version ${OXLINT_VERSION} --no-git-tag-version
 
-      - uses: peter-evans/create-pull-request@dd2324fc52d5d43c699a5636bcf19fceaa70c284 # v7.0.7
+      - uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8
         with:
           # bot account with PAT required for triggering workflow runs
           # See https://github.com/peter-evans/create-pull-request/blob/main/docs/concepts-guidelines.md#triggering-further-workflow-runs

.github/workflows/ci_security.yml

@@ -27,7 +27,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: taiki-e/install-action@3c8fc6eaa5fcff049bb133c1f540c6c2287a191f # v2.49.10
+      - uses: taiki-e/install-action@1e1237f7a4f2d8bc638667e95fe2579653d6db09 # v2.49.17
         with:
           tool: zizmor
 
@@ -37,7 +37,7 @@ jobs:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
         with:
           sarif_file: results.sarif
           category: zizmor