chore(deps): update github-actions dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/setup-buildx-action	action	minor	v3.10.0 -> v3.11.1
github/codeql-action	action	minor	v3.28.19 -> v3.29.2
grafana/security-github-actions	action	digest	27ae2fd -> 8d8aa0c
softprops/action-gh-release	action	minor	v2.2.2 -> v2.3.2

---

Release Notes

docker/setup-buildx-action (docker/setup-buildx-action)

v3.11.1

Compare Source

• Fix keep-state not being respected by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/429

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Compare Source

• Keep BuildKit state support by @​crazy-max in https://github.com/docker/setup-buildx-action/pull/427
• Remove aliases created when installing by default by @​hashhar in https://github.com/docker/setup-buildx-action/pull/139
• Bump @​docker/actions-toolkit from 0.56.0 to 0.62.1 in https://github.com/docker/setup-buildx-action/pull/422 https://github.com/docker/setup-buildx-action/pull/425

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

github/codeql-action (github/codeql-action)

v3.29.2

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.2 - 30 Jun 2025

• Experimental: When the quality-queries input for the init action is provided with an argument, separate .quality.sarif files are produced and uploaded for each language with the results of the specified queries. Do not use this in production as it is part of an internal experiment and subject to change at any time. #​2935

See the full CHANGELOG.md for more information.

v3.29.1

Compare Source

v3.29.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.0 - 11 Jun 2025

• Update default CodeQL bundle version to 2.22.0. #​2925
• Bump minimum CodeQL bundle version to 2.16.6. #​2912

See the full CHANGELOG.md for more information.

softprops/action-gh-release (softprops/action-gh-release)

v2.3.2

Compare Source

• fix: revert fs readableWebStream change

v2.3.1

Compare Source

What's Changed

Bug fixes 🐛

• fix: fix file closing issue by @​WailGree in https://github.com/softprops/action-gh-release/pull/629

New Contributors

• @​WailGree made their first contribution in https://github.com/softprops/action-gh-release/pull/629

Full Changelog: softprops/action-gh-release@v2.3.0...v2.3.1

v2.3.0

Compare Source

• Migrate from jest to vitest
• Replace mime with mime-types
• Bump to use node 24
• Dependency updates

Full Changelog: softprops/action-gh-release@v2.2.2...v2.3.0

---

Configuration

📅 Schedule: Branch creation - Between 06:00 AM and 10:59 AM, only on Monday ( * 6-10 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.