Merge pull request #287 from smallstep/dependabot/github_actions/all-97e31cf564

build(deps): bump the all group with 2 updates

Author: step-ci

.github/workflows/codeql-analysis.yml

@@ -97,7 +97,7 @@ jobs:
       -
         # Initializes the CodeQL tools for scanning.
         name: Initialize CodeQL
-        uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
+        uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
         with:
           languages: ${{ matrix.language }}
           queries: security-and-quality     # use Canonical suite
@@ -113,7 +113,7 @@ jobs:
           ${{ inputs.codeql-build-cmd }}
       -
         name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
+        uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
         with:
           output: codeql-results
           category: "/language:${{ matrix.language }}"

.github/workflows/goreleaser.yml

@@ -148,7 +148,7 @@ jobs:
           GPG_PRIVATE_KEY: ${{ secrets.GPG_PRIVATE_KEY }}
       -
         name: Run GoReleaser Pro
-        uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
+        uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0
         with:
           distribution: goreleaser-pro
           version: "v2.10.2"