Bump lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml from 0.9.0 to 0.9.2

## Release notes

Sourced from lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml's releases.

v0.9.2

🐛 Bug Fixes 🐛

Fix(scorecard): Hard-code the scan runner label @​ModeSevenIndustrialSolutions (#116)

🎓 Code Quality 🎓

Test: Assert submodule content reaches both scans @​ModeSevenIndustrialSolutions (#114)

Links

Submit bugs/feature requests

v0.9.1

🐛 Bug Fixes 🐛

Fix(ci): Repin maven-xml-settings-action v0.1.1 @​ModeSevenIndustrialSolutions (#118)

🔧 Maintenance 🔧

Chore: pre-commit autoupdate @pre-commit-ci[bot] (#117)
Docs: Record why the Go SBOM stays on cyclonedx-gomod @​ModeSevenIndustrialSolutions (#115)
CI(actions): Bump github/codeql-action/upload-sarif from 4.38.0 to 4.38.1 @dependabot[bot] (#119)
CI(actions): Bump lfreleng-actions/maven-build-action from 0.4.2 to 0.4.3 @dependabot[bot] (#120)
CI(actions): Bump lfreleng-actions/harden-runner-block-action from 0.12.1 to 0.12.2 @dependabot[bot] (#121)
CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/release.yaml from 0.3.1 to 0.4.0 @dependabot[bot] (#122)
CI(actions): Bump lfreleng-actions/build-metadata-action from 0.8.0 to 0.8.2 @dependabot[bot] (#123)
CI(actions): Bump github/codeql-action/analyze from 4.38.0 to 4.38.1 @dependabot[bot] (#124)
CI(actions): Bump lfreleng-actions/sonatype-lifecycle-scan-action from 0.2.1 to 0.2.2 @dependabot[bot] (#125)
CI(actions): Bump astral-sh/setup-uv from 10.1.0 to 10.2.0 @dependabot[bot] (#126)
CI(actions): Bump lfreleng-actions/generic-workflows/.github/workflows/clear-action-cache.yaml from 0.3.1 to 0.4.0 @dependabot[bot] (#127)
CI(actions): Bump lfreleng-actions/zizmor-scan-action from 0.5.2 to 0.5.3 @dependabot[bot] (#128)
CI(actions): Bump github/codeql-action/init from 4.38.0 to 4.38.1 @dependabot[bot] (#129)
CI(actions): Bump lfreleng-actions/sonarqube-cloud-scan-action from 1.6.0 to 1.6.1 @dependabot[bot] (#130)

Links

Submit bugs/feature requests

## Commits

4da5165 Merge pull request #116 from modeseven-lfreleng-actions/fix/scorecard-publish
81e09a2 Fix(scorecard): Tighten the publish-rule guard
b050a69 Fix(scorecard): Hard-code the scan runner label
34374ce Merge pull request #114 from modeseven-lfreleng-actions/test/submodule-scan-c
ae96a8d Merge pull request #130 from lfreleng-actions/dependabot/github_actions/lfrel
b952d9e Merge pull request #129 from lfreleng-actions/dependabot/github_actions/githu
17e0bd6 Merge pull request #128 from lfreleng-actions/dependabot/github_actions/lfrel
d5a60f0 Merge pull request #127 from lfreleng-actions/dependabot/github_actions/lfrel
8becb40 Merge pull request #126 from lfreleng-actions/dependabot/github_actions/astra
d184f53 Merge pull request #125 from lfreleng-actions/dependabot/github_actions/lfrel
Additional commits viewable in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Change-Id: I719dfe1a444df3d2e66c6fabb0cc5cd9ffd3a457
GitHub-PR: #44
GitHub-Hash: d35e29a8c051416e
Signed-off-by: onap.gh2gerrit <releng+onap-gh2gerrit@linuxfoundation.org>

Author: dependabot[bot]

.github/workflows/gerrit-clm.yaml

@@ -129,7 +129,7 @@ jobs:
     permissions:
       contents: read
     # yamllint disable-line rule:line-length
-    uses: lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml@76ea52302203912c2ced87702681da58b447d62e  # v0.9.0
+    uses: lfreleng-actions/security-workflows/.github/workflows/sonatype-lifecycle.yaml@4da5165382f8ca9b5ef0270caa343be4a63493d5  # v0.9.2
     with:
       # Build before scanning: Nexus IQ identifies far more components
       # from the packaged output than from source alone. Neither the