chore(deps): update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
chgl/.github	action	minor	v1.9.2 -> v1.10.0
github/codeql-action	action	patch	v3.27.5 -> v3.27.9

---

Release Notes

chgl/.github (chgl/.github)

v1.10.0

Compare Source

Features

• added zizmor scan (#​126) (a38e8e9)

v1.9.5

Compare Source

Miscellaneous Chores

• deps: update all non-major dependencies (#​125) (eeb21cc)

v1.9.4

Compare Source

Miscellaneous Chores

• config: migrate config .renovaterc.json (#​123) (c11343a)
• deps: update docker.io/library/python:3.13.0-slim docker digest to 0de8181 (#​124) (534b9e6)

v1.9.3

Compare Source

Miscellaneous Chores

• deps: update docker/metadata-action digest to 369eb59 (#​120) (667bfc5)

github/codeql-action (github/codeql-action)

v3.27.9

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.9 - 12 Dec 2024

No user facing changes.

See the full CHANGELOG.md for more information.

v3.27.8

Compare Source

v3.27.7

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

Note that the only difference between v2 and v3 of the CodeQL Action is the node version they support, with v3 running on node 20 while we continue to release v2 to support running on node 16. For example 3.22.11 was the first v3 release and is functionally identical to 2.22.11. This approach ensures an easy way to track exactly which features are included in different versions, indicated by the minor and patch version numbers.

3.27.7 - 10 Dec 2024

• We are rolling out a change in December 2024 that will extract the CodeQL bundle directly to the toolcache to improve performance. #​2631
• Update default CodeQL bundle version to 2.20.0. #​2636

See the full CHANGELOG.md for more information.

v3.27.6

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🦙 MegaLinter status: ⚠️ WARNING

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	3		0	0.03s
✅ CSHARP	csharpier	5	2	0	1.35s
⚠️ CSHARP	dotnet-format	yes	yes	1	3.06s
✅ CSHARP	roslynator	3	0	0	25.02s
✅ DOCKERFILE	hadolint	1		0	0.12s
✅ EDITORCONFIG	editorconfig-checker	45		0	0.2s
✅ JSON	jsonlint	13		0	0.18s
✅ JSON	prettier	13	3	0	0.76s
✅ JSON	v8r	13		0	8.48s
✅ MARKDOWN	markdownlint	2	0	0	0.59s
✅ REPOSITORY	checkov	yes		no	16.08s
✅ REPOSITORY	dustilock	yes		no	0.01s
✅ REPOSITORY	git_diff	yes		no	0.02s
✅ REPOSITORY	grype	yes		no	9.91s
✅ REPOSITORY	kics	yes		no	5.72s
✅ REPOSITORY	secretlint	yes		no	0.96s
✅ REPOSITORY	syft	yes		no	1.13s
✅ REPOSITORY	trivy	yes		no	4.98s
✅ REPOSITORY	trivy-sbom	yes		no	0.08s
✅ REPOSITORY	trufflehog	yes		no	1.5s
✅ YAML	prettier	15	0	0	0.78s
✅ YAML	v8r	15		0	18.33s
✅ YAML	yamllint	15		0	0.52s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

• Click here to request the new flavor

MegaLinter is graciously provided by

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[github-actions]

Trivy image scan report

ghcr.io/chgl/fhir-server-exporter:pr-289 (ubuntu 24.04)

No Vulnerabilities found

No Misconfigurations found

opt/fhir-server-exporter/FhirServerExporter.deps.json

No Vulnerabilities found

No Misconfigurations found

opt/fhir-server-exporter/packages.lock.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.AspNetCore.App/9.0.0/Microsoft.AspNetCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

usr/share/dotnet/shared/Microsoft.NETCore.App/9.0.0/Microsoft.NETCore.App.deps.json

No Vulnerabilities found

No Misconfigurations found

[chgl]

🎉 This PR is included in version 2.3.26 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀