chore(deps): update github-actions

[ffurrer2-renovate]

This PR contains the following updates:

Package	Type	Update	Change
anchore/scan-action	action	minor	v7.0.2 -> v7.1.0
github/codeql-action	action	minor	v4.30.9 -> v4.31.0

---

Release Notes

anchore/scan-action (anchore/scan-action)

v7.1.0

Compare Source

New in scan-action v7.1.0

• chore(deps): update Grype to v0.102.0 (#​536) [[anchore-actions-token-generator[bot]](https://github.com/anchore-actions-token-generator[bot])]
• chore(deps-dev): bump lint-staged from 16.2.5 to 16.2.6 (#​535) [[dependabot[bot]](https://github.com/dependabot[bot])]
• chore(deps-dev): bump eslint from 9.37.0 to 9.38.0 (#​533) [[dependabot[bot]](https://github.com/dependabot[bot])]
• chore(deps-dev): bump lint-staged from 16.2.4 to 16.2.5 (#​534) [[dependabot[bot]](https://github.com/dependabot[bot])]

github/codeql-action (github/codeql-action)

v4.31.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

4.31.0 - 24 Oct 2025

• Bump minimum CodeQL bundle version to 2.17.6. #​3223
• When SARIF files are uploaded by the analyze or upload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the upload-sarif action. For analyze, this may affect Advanced Setup for CodeQL users who specify a value other than always for the upload input. #​3222

See the full CHANGELOG.md for more information.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.