Bump the github-actions-updates group with 4 updates

Bumps the github-actions-updates group with 4 updates: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml, step-security/harden-runner, lfreleng-actions/maven-build-action and lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml.

Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 2.0.0 to 2.1.0
## Release notes

Sourced from lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml's releases.

v2.1.0

✨ New Features ✨

Feat: Gate fork PR transfer on maintainer approval @​ModeSevenIndustrialSolutions (#390)

🐛 Bug Fixes 🐛

Fix: Authorise @​github2gerrit comment directives @​ModeSevenIndustrialSolutions (#389)

🔧 Maintenance 🔧

Chore: pre-commit autoupdate @pre-commit-ci[bot] (#388)

Links

Submit bugs/feature requests

## Commits

3d548cc Merge pull request #390 from modeseven-lfreleng-actions/feat/fork-approval-gate
bfdb90e Fix: Address Copilot review feedback
b65bf61 Feat: Gate fork PR transfer on maintainer approval
a485b30 Merge pull request #389 from modeseven-lfreleng-actions/fix/pr-command-author
411afac Fix: Authorise @​github2gerrit comment directives
9d659e2 Merge pull request #388 from lfreleng-actions/pre-commit-ci-update-config
da33e11 Chore: pre-commit autoupdate
See full diff in compare view

Updates `step-security/harden-runner` from 2.21.0 to 2.21.1
## Release notes

Sourced from step-security/harden-runner's releases.

v2.21.1
What's Changed

Improved performance of the disable-sudo feature.
Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode.
Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged /usr filesystem layout (for example Debian 11), where /usr/bin/echo does not exist. This mainly affected self-hosted runners.
Documentation updates: clarified which features are in the Community (free) vs Enterprise tier.

Full Changelog: step-security/harden-runner@v2.21.0...v2.21.1

## Commits

e14015d Merge pull request #690 from step-security/rc-43
9001249 docs: update harden-runner version pin to v2.21.0 in getting started example
a447fba docs: expand enterprise feature list and document custom VM and ubuntu-slim l
b0eaf8d docs: clarify community vs enterprise tiers and add maintained actions section
063e8e3 Merge pull request #687 from rohan-stepsecurity/rp/fix/bin-echo-fallback
f46bdc1 chore: bump agent-ebpf to v1.9.1 and agent to v0.16.3
42e6daa fix: fall back to /bin/echo for non-usr-merged distros
See full diff in compare view

Updates `lfreleng-actions/maven-build-action` from 0.3.1 to 0.4.2
## Release notes

Sourced from lfreleng-actions/maven-build-action's releases.

v0.4.2

🐛 Bug Fixes 🐛

Fix: Assemble shared JaCoCo data after build @​askb (#137)

🔧 Maintenance 🔧

Chore: pre-commit autoupdate @pre-commit-ci[bot] (#138)
Chore: Replace LICENSE symlink with regular file @​ModeSevenIndustrialSolutions (#135)

Links

Submit bugs/feature requests

v0.4.1

🐛 Bug Fixes 🐛

Fix: Keep shared JaCoCo data clear of target/ @​askb (#136)

Links

Submit bugs/feature requests

v0.4.0

✨ New Features ✨

Feat: Add a cache-clearing workflow @​ModeSevenIndustrialSolutions (#115)
Feat: Aggregate JaCoCo coverage across Maven subprojects @​askb (#130)

🐛 Bug Fixes 🐛

Fix: Expand workspace variables in Maven arguments @​askb (#127)

🔧 Maintenance 🔧

Refactor: Call the shared release workflow @​ModeSevenIndustrialSolutions (#116)
Chore: Bump release-drafter/release-drafter from 7.6.0 to 7.7.0 @dependabot[bot] (#118)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.9.1 to 0.10.0 @dependabot[bot] (#119)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#120)
Chore: Bump step-security/harden-runner from 2.20.0 to 2.20.1 @dependabot[bot] (#121)
Chore: Bump actions/setup-java from 5.6.0 to 5.7.0 @dependabot[bot] (#122)
Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.10.0 to 0.10.1 @dependabot[bot] (#123)
Chore: Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.0.3 to 0.0.4 @dependabot[bot] (#124)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#125)
Chore: pre-commit autoupdate @pre-commit-ci[bot] (#126)
Chore: Bump lfreleng-actions/harden-runner-block-action from 0.2.1 to 0.11.1 @dependabot[bot] (#131)

... (truncated)

## Commits

3c48aed Merge pull request #135 from modeseven-lfreleng-actions/chore/license-regular
85e7e48 Merge pull request #137 from lfreleng-actions/fix/jacoco-shared-merge-collision
ea67965 Merge pull request #138 from lfreleng-actions/pre-commit-ci-update-config
e716118 Chore: pre-commit autoupdate
1803ab5 Fix: Assemble shared JaCoCo data after build
af7e9ae Merge pull request #136 from lfreleng-actions/fix/shared-jacoco-outside-target
cdc2803 Fix: Keep shared JaCoCo data clear of target/
4707b59 Chore: Replace LICENSE symlink with regular file
4fe4890 Merge pull request #130 from lfreleng-actions/feat/jacoco-subproject-aggregation
e9cbdb1 fix: keep a comma out of the paths handed to Sonar
Additional commits viewable in compare view

Updates `lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml` from 0.10.2 to 0.10.3
## Release notes

Sourced from lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml's releases.

v0.10.3

🔧 Maintenance 🔧

Chore: Bump harden-runner allow-list to v0.16.0 @​ModeSevenIndustrialSolutions (#879)
Chore: Bump lfreleng-actions/harden-runner-block-action from 0.2.1 to 0.12.1 @dependabot[bot] (#868)
Chore: Bump lfreleng-actions/draft-release-promote-action from 0.1.4 to 0.1.5 @dependabot[bot] (#869)
Chore: Bump lfreleng-actions/tox-run-action from 0.1.2 to 0.1.3 @dependabot[bot] (#866)
Chore: Bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8 @dependabot[bot] (#870)
Chore: Bump 1password/load-secrets-action from 5.0.0 to 5.0.1 @dependabot[bot] (#867)
Chore: Bump lfreleng-actions/inject-issue-id-action from 0.1.2 to 0.1.3 @dependabot[bot] (#871)
Chore: Bump lfreleng-actions/docker-save-images-action from 0.1.1 to 0.2.0 @dependabot[bot] (#872)
Chore: Bump lfreleng-actions/checkout-gerrit-change-action from 1.0.2 to 1.1.0 @dependabot[bot] (#873)
Chore: Bump lfreleng-actions/tag-push-verify-action from 0.1.2 to 0.1.3 @dependabot[bot] (#874)
Chore: Bump lfreleng-actions/openssf-scorecard-summary-action from 0.1.1 to 0.1.2 @dependabot[bot] (#875)
Chore: Bump github/codeql-action/init from 4.37.7 to 4.37.8 @dependabot[bot] (#876)
Chore: Bump github/codeql-action/analyze from 4.37.7 to 4.37.8 @dependabot[bot] (#877)
Chore: pre-commit linting updates @pre-commit-ci[bot] (#878)

Links

Submit bugs/feature requests

## Commits

87eacd1 Merge pull request #878 from lfit/pre-commit-ci-update-config
e80cc27 Merge pull request #877 from lfit/dependabot/github_actions/github/codeql-act
8cf781e Merge pull request #876 from lfit/dependabot/github_actions/github/codeql-act
9e5b39e Merge pull request #875 from lfit/dependabot/github_actions/lfreleng-actions/
3d515a0 Merge pull request #874 from lfit/dependabot/github_actions/lfreleng-actions/
75daab7 Merge pull request #873 from lfit/dependabot/github_actions/lfreleng-actions/
7b22cd2 Merge pull request #872 from lfit/dependabot/github_actions/lfreleng-actions/
3d8ec4f Merge pull request #871 from lfit/dependabot/github_actions/lfreleng-actions/
685f654 Merge pull request #867 from lfit/dependabot/github_actions/1password/load-se
ecfca7e Merge pull request #870 from lfit/dependabot/github_actions/github/codeql-act
Additional commits viewable in compare view

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: I0004cc17a8349beaad7892745c7c233d642e4947
GitHub-PR: #29
GitHub-Hash: 6afe145b6ca0a3ee
Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

Author: dependabot[bot]

.github/workflows/call-github2gerrit.yaml

@@ -67,7 +67,7 @@ jobs:
       pull-requests: write  # comment on and close mirrored PRs
       issues: write  # manage PR/issue metadata during mirroring
     # yamllint disable-line rule:line-length
-    uses: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml@f44ab263b27a93ea20af8a13647fdaaafa3da4eb  # v2.0.0
+    uses: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml@3d548cc0cd8e04175da73a7dc3449b312ce67e07  # v2.1.0
     with:
       USE_PR_AS_COMMIT: true
       GERRIT_KNOWN_HOSTS: ${{ vars.GERRIT_KNOWN_HOSTS }}

.github/workflows/gerrit-clm.yaml

@@ -111,7 +111,7 @@ jobs:
     steps:
       # Harden the runner used by this workflow
       # yamllint disable-line rule:line-length
-      - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c  # v2.21.0
+      - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1  # v2.21.1
         with:
           egress-policy: audit
 
@@ -139,7 +139,7 @@ jobs:
     steps:
       # Harden the runner used by this workflow
       # yamllint disable-line rule:line-length
-      - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c  # v2.21.0
+      - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1  # v2.21.1
         with:
           egress-policy: audit
 
@@ -374,7 +374,7 @@ jobs:
         if: steps.check-pom-xml.outputs.exists == 'true'
         continue-on-error: true
         # yamllint disable-line rule:line-length
-        uses: lfreleng-actions/maven-build-action@6a687d420895015a60abd139e37ba1ae7e78e8e8 # v0.3.1
+        uses: lfreleng-actions/maven-build-action@3c48aed21aa422b16e1a15f31adbb2331aa59e83 # v0.4.2
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: ${{ env.JAVA_DISTRIBUTION }}
@@ -411,7 +411,7 @@ jobs:
     steps:
       # Harden the runner used by this workflow
       # yamllint disable-line rule:line-length
-      - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c  # v2.21.0
+      - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1  # v2.21.1
         with:
           egress-policy: audit
 

.github/workflows/open-ssf-scorecard.yaml

@@ -39,7 +39,7 @@ jobs:
   openssf-scorecard:
     name: "OpenSSF Scorecard"
     # yamllint disable-line rule:line-length
-    uses: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml@dd7e7f1359ca34ca29a409354fcc648b4ec7a561 # v0.10.2
+    uses: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml@87eacd1f8322263ebbc1411ce2ea82bab10ed091 # v0.10.3
     permissions:
       # Needed to upload the results to code-scanning dashboard.
       security-events: write