[dependabot] Bump GitHub actions dependencies (#3426)

* Updates `actions/cache` from 4.2.4 to 4.3.0
* Updates `github/codeql-action` from 3.29.11 to 3.30.6
* Updates `actions/dependency-review-action` from 4.7.2 to 4.8.0
* Updates `actions/setup-python` from 5.6.0 to 6.0.0
* Updates `ossf/scorecard-action` from 2.4.2 to 2.4.3

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/build-and-test.yml

@@ -61,7 +61,7 @@ jobs:
         with:
           distribution: 'temurin'
           java-version: '11'
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           key: ${{ hashFiles('**/pom.xml') }}-compile-${{ inputs.scala-version }}
           path: |

.github/workflows/codacy.yml

@@ -72,7 +72,7 @@ jobs:
 
       # Upload the SARIF file generated in the previous step
       - name: Upload SARIF results file
-        uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
+        uses: github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
         with:
           sarif_file: results.sarif
           category: codacy-${{ matrix.tool }}

.github/workflows/dash-scheduled.yml

@@ -24,7 +24,7 @@ jobs:
         with:
           distribution: 'temurin'
           java-version: '11'
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           key: ${{ hashFiles('**/pom.xml') }}-dash-scheduled-${{ matrix.version }}
           path: |

.github/workflows/dash.yml

@@ -51,7 +51,7 @@ jobs:
         with:
           distribution: 'temurin'
           java-version: '11'
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         if: steps.pom_changes.outputs.pom_changed == 'true'
         with:
           key: ${{ hashFiles('**/pom.xml') }}-dash-${{ inputs.scala-version }}

.github/workflows/dependency-review.yml

@@ -19,4 +19,4 @@ jobs:
       - name: 'Checkout Repository'
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@bc41886e18ea39df68b1b1245f4184881938e050 # v4.7.2
+        uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1

.github/workflows/docs.yml

@@ -24,11 +24,11 @@ jobs:
         with:
           distribution: 'temurin'
           java-version: '11'
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           key: ${{ hashFiles('**/pom.xml') }}-docs
           path: ~/.m2/repository/
-      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+      - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: '3.10'
           cache: 'pip'

.github/workflows/eclipse-snapshots.yml

@@ -26,7 +26,7 @@ jobs:
         with:
           distribution: 'temurin'
           java-version: '11'
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           key: ${{ hashFiles('**/pom.xml') }}-eclipse-snapshots-${{ matrix.version }}
           path: |

.github/workflows/integration-tests.yml

@@ -23,7 +23,7 @@ jobs:
         with:
           distribution: 'temurin'
           java-version: '11'
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           key: ${{ hashFiles('**/pom.xml') }}-it-${{ inputs.scala-version }}
           path: ~/.m2/repository/

.github/workflows/javadocs.yml

@@ -32,7 +32,7 @@ jobs:
         with:
           distribution: 'temurin'
           java-version: '11'
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           key: ${{ hashFiles('**/pom.xml') }}-javadocs-${{ inputs.scala-version }}
           path: ~/.m2/repository/

.github/workflows/license-headers.yml

@@ -24,7 +24,7 @@ jobs:
         with:
           distribution: 'temurin'
           java-version: '11'
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           key: ${{ hashFiles('**/pom.xml') }}-license-header-check
           path: ~/.m2/repository/