chore(deps): update github-actions

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	digest	8e5e7e5 -> 96f5310
actions/checkout	action	patch	v3.5.2 -> v3.5.3
actions/setup-go	action	patch	v4.0.0 -> v4.0.1
actions/setup-java	action	digest	5ffc13f -> 87c1c70
github/codeql-action	action	patch	v2.3.3 -> v2.3.6
sigstore/cosign-installer	action	patch	v3.0.3 -> v3.0.5

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

actions/checkout

v3.5.3

Compare Source

• Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in
• Fix typos found by codespell
• Add support for sparse checkouts

actions/setup-go

v4.0.1

Compare Source

What's Changed

• Update documentation for v4 by @​dsame in https://github.com/actions/setup-go/pull/354
• Fix glob bug in the package.json scripts section by @​IvanZosimov in https://github.com/actions/setup-go/pull/359
• Bump xml2js dependency by @​dmitry-shibanov in https://github.com/actions/setup-go/pull/370
• Bump @actions/cache dependency to v3.2.1 by @​nikolai-laevskii in https://github.com/actions/setup-go/pull/374

New Contributors

• @​nikolai-laevskii made their first contribution in https://github.com/actions/setup-go/pull/374

Full Changelog: actions/setup-go@v4...v4.0.1

github/codeql-action

v2.3.6

Compare Source

v2.3.5

Compare Source

v2.3.4

Compare Source

sigstore/cosign-installer

v3.0.5

Compare Source

What's Changed

• download cosign releases from GitHub rather than GCS by @​bobcallaway in https://github.com/sigstore/cosign-installer/pull/126

Full Changelog: sigstore/cosign-installer@v3.0.4...v3.0.5

v3.0.4

Compare Source

• Include fix for https://github.com/sigstore/cosign-installer/pull/124
• changes download URL for cosign binary to github.com instead of GCS

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.