chore(deps): bump the actions-deps group with 6 updates (#785)

Bumps the actions-deps group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml](https://github.com/aws/aws-durable-execution-ci) | `0.4.0` | `0.5.0` |
| [aws/aws-durable-execution-ci/.github/workflows/notify.yml](https://github.com/aws/aws-durable-execution-ci) | `0.4.0` | `0.5.0` |
| [aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml](https://github.com/aws/aws-durable-execution-conformance-tests) | `e48ac54502d3c14e2e3fa216c5e200dbb4c14ac2` | `2387bb48968f7420ddf55aaf6dc83a9f15778332` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.4` | `2.5.0` |
| [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.38.3` | `4.39.0` |
| [aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml](https://github.com/aws/aws-durable-execution-ci) | `0.4.0` | `0.5.0` |


Updates `aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml` from 0.4.0 to 0.5.0
- [Release notes](https://github.com/aws/aws-durable-execution-ci/releases)
- [Commits](aws/aws-durable-execution-ci@8ea8219...8a06a1e)

Updates `aws/aws-durable-execution-ci/.github/workflows/notify.yml` from 0.4.0 to 0.5.0
- [Release notes](https://github.com/aws/aws-durable-execution-ci/releases)
- [Commits](aws/aws-durable-execution-ci@8ea8219...8a06a1e)

Updates `aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml` from e48ac54502d3c14e2e3fa216c5e200dbb4c14ac2 to 2387bb48968f7420ddf55aaf6dc83a9f15778332
- [Release notes](https://github.com/aws/aws-durable-execution-conformance-tests/releases)
- [Commits](aws/aws-durable-execution-conformance-tests@e48ac54...2387bb4)

Updates `ossf/scorecard-action` from 2.4.4 to 2.5.0
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](ossf/scorecard-action@2d11466...fa7117d)

Updates `github/codeql-action/upload-sarif` from 4.38.3 to 4.39.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@24c5418...6f2ac81)

Updates `aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml` from 0.4.0 to 0.5.0
- [Release notes](https://github.com/aws/aws-durable-execution-ci/releases)
- [Commits](aws/aws-durable-execution-ci@8ea8219...8a06a1e)

---
updated-dependencies:
- dependency-name: aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: aws/aws-durable-execution-ci/.github/workflows/notify.yml
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml
  dependency-version: 2387bb48968f7420ddf55aaf6dc83a9f15778332
  dependency-type: direct:production
  dependency-group: actions-deps
- dependency-name: ossf/scorecard-action
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
- dependency-name: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/issue-triage.yml

@@ -12,7 +12,7 @@ jobs:
       contents: read
       id-token: write
       issues: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml@8ea82196db65b5b0dd67f0b72bb03fa2fa9cf65b
+    uses: aws/aws-durable-execution-ci/.github/workflows/issue-triage.yml@8a06a1e5c82083a9224af9d489ddd030be44d978
     with:
       # CodeBuild-hosted runner in the Python testing account; the label must
       # match the CodeBuild project name.

.github/workflows/notify.yml

@@ -16,7 +16,7 @@ jobs:
       contents: read
       models: read
       id-token: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/notify.yml@8ea82196db65b5b0dd67f0b72bb03fa2fa9cf65b
+    uses: aws/aws-durable-execution-ci/.github/workflows/notify.yml@8a06a1e5c82083a9224af9d489ddd030be44d978
     with:
       # CodeBuild-hosted runner in the Python testing account; the label must
       # match the CodeBuild project name.

.github/workflows/opentelemetry-conformance-tests.yml

@@ -66,7 +66,7 @@ jobs:
       actions: write
       contents: read
       id-token: write
-    uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@e48ac54502d3c14e2e3fa216c5e200dbb4c14ac2
+    uses: aws/aws-durable-execution-conformance-tests/.github/workflows/opentelemetry-orchestrator.yml@2387bb48968f7420ddf55aaf6dc83a9f15778332
     with:
       language: python
       runs_on: codebuild-github-actions-runner-${{ github.run_id }}-${{ github.run_attempt }}

.github/workflows/scorecard.yml

@@ -41,7 +41,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
+        uses: ossf/scorecard-action@fa7117db83c52d787ae5a89f350999701505d78e # v2.5.0
         with:
           results_file: results.sarif
           results_format: sarif
@@ -75,6 +75,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
+        uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
         with:
           sarif_file: results.sarif

.github/workflows/stale-issue-closer.yml

@@ -14,7 +14,7 @@ jobs:
     permissions:
       contents: read
       issues: write
-    uses: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml@8ea82196db65b5b0dd67f0b72bb03fa2fa9cf65b
+    uses: aws/aws-durable-execution-ci/.github/workflows/stale-issue-closer.yml@8a06a1e5c82083a9224af9d489ddd030be44d978
     with:
       # CodeBuild-hosted runner in the Python testing account; the label must
       # match the CodeBuild project name.