chore(deps): update workflows (#2392)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-python](https://togithub.com/actions/setup-python) |
action | patch | `v5.1.0` -> `v5.1.1` |
| [github/codeql-action](https://togithub.com/github/codeql-action) |
action | patch | `v2.25.11` -> `v2.25.12` |

---

### Release Notes

<details>
<summary>actions/setup-python (actions/setup-python)</summary>

###
[`v5.1.1`](https://togithub.com/actions/setup-python/releases/tag/v5.1.1)

[Compare
Source](https://togithub.com/actions/setup-python/compare/v5.1.0...v5.1.1)

##### What's Changed

##### Bug fixes:

- fix(ci): update all failing workflows by
[@&#8203;mayeut](https://togithub.com/mayeut) in
[https://github.com/actions/setup-python/pull/863](https://togithub.com/actions/setup-python/pull/863)
This update ensures compatibility and optimal performance of workflows
on the latest macOS version.

##### Documentation changes:

- Documentation update for cache by
[@&#8203;gowridurgad](https://togithub.com/gowridurgad) in
[https://github.com/actions/setup-python/pull/873](https://togithub.com/actions/setup-python/pull/873)

##### Dependency updates:

- Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[https://github.com/actions/setup-python/pull/893](https://togithub.com/actions/setup-python/pull/893)

##### New Contributors

- [@&#8203;gowridurgad](https://togithub.com/gowridurgad) made their
first contribution in
[https://github.com/actions/setup-python/pull/873](https://togithub.com/actions/setup-python/pull/873)

**Full Changelog**:
actions/setup-python@v5...v5.1.1

</details>

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v2.25.12`](https://togithub.com/github/codeql-action/compare/v2.25.11...v2.25.12)

[Compare
Source](https://togithub.com/github/codeql-action/compare/v2.25.11...v2.25.12)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on wednesday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/google/osv.dev).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MzEuNCIsInVwZGF0ZWRJblZlciI6IjM3LjQzMS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->

.github/workflows/publish-to-pypi.yaml

@@ -29,7 +29,7 @@ jobs:
         fetch-depth: 0
         submodules: recursive
     - name: Set up Python 3
-      uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
+      uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
       with:
         python-version: 3.7
     - name: Install pypa/build

.github/workflows/scorecards.yml

@@ -50,6 +50,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@d958b976dc5b990f802df244f2dc5d807113327f # v2.25.11
+        uses: github/codeql-action/upload-sarif@e113c555ef0956479345cfc3ed530c938d670db0 # v2.25.12
         with:
           sarif_file: results.sarif