chore(deps): update github-actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v4.1.6 -> v4.1.7
amannn/action-semantic-pull-request	action	digest	e9fabac -> 0723387
github/codeql-action	action	patch	v3.25.7 -> v3.25.11
miracum/.github	action	minor	v1.9.1 -> v1.10.2

---

Release Notes

actions/checkout (actions/checkout)

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in https://github.com/actions/checkout/pull/1739
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/actions/checkout/pull/1697
• Check out other refs/* by commit by @​orhantoy in https://github.com/actions/checkout/pull/1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in https://github.com/actions/checkout/pull/1776

github/codeql-action (github/codeql-action)

v3.25.11

Compare Source

v3.25.10

Compare Source

v3.25.9

Compare Source

v3.25.8

Compare Source

miracum/.github (miracum/.github)

v1.10.2

Compare Source

Bug Fixes

• set trivy ignore-unfixed to true by default (#​65) (db8574b)

v1.10.1

Compare Source

CI/CD

• create scorecard.yaml (#​62) (f5c80e0)

Miscellaneous Chores

• deps: update docker/build-push-action action to v6 (#​64) (e658df8)
• deps: update github-actions (#​63) (9df18a3)

v1.10.0

Compare Source

Features

• harden runner for build and release jobs (#​61) (d53f448)

v1.9.2

Compare Source

Miscellaneous Chores

• deps: update all non-major dependencies (#​57) (54ebc8d)
• deps: update gcr.io/distroless/python3-debian12:nonroot docker digest to 14c62b8 (#​56) (5eab4c7)
• deps: update github-actions (#​60) (dee5806)

---

Configuration

📅 Schedule: Branch creation - "every 3 months on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	5		0	0.08s
✅ BASH	bash-exec	2		0	0.05s
✅ BASH	shellcheck	2		0	0.03s
✅ BASH	shfmt	2		0	0.03s
✅ DOCKERFILE	hadolint	2		0	0.25s
✅ JSON	jsonlint	17		0	0.45s
✅ JSON	npm-package-json-lint	yes		no	0.6s
✅ JSON	prettier	17		0	1.66s
✅ MARKDOWN	markdownlint	3		0	0.59s
✅ PYTHON	bandit	31		0	2.33s
✅ PYTHON	black	31		0	2.56s
✅ PYTHON	flake8	31		0	1.38s
✅ PYTHON	isort	31		0	0.48s
✅ PYTHON	mypy	31		0	11.02s
✅ PYTHON	pyright	31		0	10.94s
✅ PYTHON	ruff	31		0	0.02s
✅ REPOSITORY	checkov	yes		no	15.32s
✅ REPOSITORY	gitleaks	yes		no	0.14s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	15.27s
✅ REPOSITORY	kics	yes		no	31.64s
✅ REPOSITORY	secretlint	yes		no	0.94s
✅ REPOSITORY	syft	yes		no	0.67s
✅ REPOSITORY	trivy	yes		no	9.74s
✅ REPOSITORY	trivy-sbom	yes		no	5.56s
✅ REPOSITORY	trufflehog	yes		no	6.75s
✅ YAML	prettier	15		0	0.95s
✅ YAML	yamllint	15		0	0.63s

See detailed report in MegaLinter reports

You could have same capabilities but better runtime performances if you request a new MegaLinter flavor.

• Click here to request the new flavor

MegaLinter is graciously provided by

[github-actions]

Trivy image scan report

ghcr.io/miracum/ahd2fhir:pr-180 (debian 12.5)

25 known vulnerabilities found (CRITICAL: 0 HIGH: 12 MEDIUM: 13 LOW: 0)

Show detailed table of vulnerabilities

Package	ID	Severity	Installed Version	Fixed Version
libc6	CVE-2024-2961	HIGH	2.36-9+deb12u4	2.36-9+deb12u6
libc6	CVE-2024-33599	HIGH	2.36-9+deb12u4	2.36-9+deb12u7
libc6	CVE-2024-33600	MEDIUM	2.36-9+deb12u4	2.36-9+deb12u7
libc6	CVE-2024-33601	MEDIUM	2.36-9+deb12u4	2.36-9+deb12u7
libc6	CVE-2024-33602	MEDIUM	2.36-9+deb12u4	2.36-9+deb12u7
libpython3.11-minimal	CVE-2023-24329	HIGH	3.11.2-6	3.11.2-6+deb12u2
libpython3.11-minimal	CVE-2023-41105	HIGH	3.11.2-6	3.11.2-6+deb12u2
libpython3.11-minimal	CVE-2023-6597	HIGH	3.11.2-6	3.11.2-6+deb12u2
libpython3.11-minimal	CVE-2023-40217	MEDIUM	3.11.2-6	3.11.2-6+deb12u2
libpython3.11-minimal	CVE-2024-0450	MEDIUM	3.11.2-6	3.11.2-6+deb12u2
libpython3.11-stdlib	CVE-2023-24329	HIGH	3.11.2-6	3.11.2-6+deb12u2
libpython3.11-stdlib	CVE-2023-41105	HIGH	3.11.2-6	3.11.2-6+deb12u2
libpython3.11-stdlib	CVE-2023-6597	HIGH	3.11.2-6	3.11.2-6+deb12u2
libpython3.11-stdlib	CVE-2023-40217	MEDIUM	3.11.2-6	3.11.2-6+deb12u2
libpython3.11-stdlib	CVE-2024-0450	MEDIUM	3.11.2-6	3.11.2-6+deb12u2
libssl3	CVE-2023-5678	MEDIUM	3.0.11-1~deb12u2	3.0.13-1~deb12u1
libssl3	CVE-2023-6129	MEDIUM	3.0.11-1~deb12u2	3.0.13-1~deb12u1
libssl3	CVE-2023-6237	MEDIUM	3.0.11-1~deb12u2	3.0.13-1~deb12u1
libssl3	CVE-2024-0727	MEDIUM	3.0.11-1~deb12u2	3.0.13-1~deb12u1
libuuid1	CVE-2024-28085	HIGH	2.38.1-5+b1	2.38.1-5+deb12u1
python3.11-minimal	CVE-2023-24329	HIGH	3.11.2-6	3.11.2-6+deb12u2
python3.11-minimal	CVE-2023-41105	HIGH	3.11.2-6	3.11.2-6+deb12u2
python3.11-minimal	CVE-2023-6597	HIGH	3.11.2-6	3.11.2-6+deb12u2
python3.11-minimal	CVE-2023-40217	MEDIUM	3.11.2-6	3.11.2-6+deb12u2
python3.11-minimal	CVE-2024-0450	MEDIUM	3.11.2-6	3.11.2-6+deb12u2

No Misconfigurations found

Python

No Vulnerabilities found

No Misconfigurations found

[miracum-bot]

🎉 This issue has been resolved in version 3.1.9 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀