chore(deps): update all non-major github action dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aquasecurity/trivy-action	action	digest	b77b85c -> f78e9ec
cds-snc/backstage-catalog-info-helper-action	action	pinDigest	-> e36696c
github/codeql-action	action	patch	v2.22.4 -> v2.22.5
peter-evans/create-pull-request	action	minor	v3 -> v3.14.0

Review

• Updates have been tested and work
• If updates are AWS related, versions match the infrastructure (e.g. Lambda runtime, database, etc.)

---

Release Notes

github/codeql-action (github/codeql-action)

v2.22.5

Compare Source

peter-evans/create-pull-request (peter-evans/create-pull-request)

v3.14.0: Create Pull Request v3.14.0

Compare Source

This release reverts a commit made to bump the runtime to node 16. It inadvertently caused an issue for users on GitHub Enterprise. Apologies. 🙇‍♂️

What's Changed

• feat: revert update action runtime to node 16 by @​peter-evans peter-evans/create-pull-request@18f7dc0

Full Changelog: peter-evans/create-pull-request@v3.13.0...v3.14.0

v3.13.0: Create Pull Request v3.13.0

Compare Source

What's Changed

• Document that draft status changes are not reflected by @​willthames in https://github.com/peter-evans/create-pull-request/pull/1064
• fix: remove unused draft param from pull update by @​peter-evans in https://github.com/peter-evans/create-pull-request/pull/1065
• Update action runtime to node 16 by @​sibiraj-s in https://github.com/peter-evans/create-pull-request/pull/1074

New Contributors

• @​willthames made their first contribution in https://github.com/peter-evans/create-pull-request/pull/1064
• @​sibiraj-s made their first contribution in https://github.com/peter-evans/create-pull-request/pull/1074

Full Changelog: peter-evans/create-pull-request@v3.12.1...v3.13.0

v3.12.1: Create Pull Request v3.12.1

Compare Source

What's Changed

• ci: remove workflow by @​peter-evans in https://github.com/peter-evans/create-pull-request/pull/1046
• fix: add '--' to checkout command to avoid ambiguity by @​kenji-miyake in https://github.com/peter-evans/create-pull-request/pull/1051

New Contributors

• @​kenji-miyake made their first contribution in https://github.com/peter-evans/create-pull-request/pull/1051

Full Changelog: peter-evans/create-pull-request@v3.12.0...v3.12.1

v3.12.0: Create Pull Request v3.12.0

Compare Source

What's Changed

• docs: Update to include app permissions needed to add teams as reviewers by @​irphilli in https://github.com/peter-evans/create-pull-request/pull/986
• docs: update marketplace logo by @​MichaelCurrin in https://github.com/peter-evans/create-pull-request/pull/992
• Update dependencies by @​actions-bot in https://github.com/peter-evans/create-pull-request/pull/967
• feat: add-paths input by @​avdeev-dima-tutu, @​avdim, @​peter-evans in https://github.com/peter-evans/create-pull-request/pull/1010

New Contributors

• @​irphilli made their first contribution in https://github.com/peter-evans/create-pull-request/pull/986
• @​MichaelCurrin made their first contribution in https://github.com/peter-evans/create-pull-request/pull/992
• @​avdeev-dima-tutu, @​avdim made their first contribution in https://github.com/peter-evans/create-pull-request/pull/1005

Full Changelog: peter-evans/create-pull-request@v3.11.0...v3.12.0

v3.11.0: Create Pull Request v3.11.0

Compare Source

What's Changed

• Update dependencies by @​actions-bot in https://github.com/peter-evans/create-pull-request/pull/894
• Update dependencies by @​actions-bot in https://github.com/peter-evans/create-pull-request/pull/932
• Update distribution by @​github-actions in https://github.com/peter-evans/create-pull-request/pull/958
• build(deps): bump ansi-regex from 5.0.0 to 5.0.1 by @​dependabot in https://github.com/peter-evans/create-pull-request/pull/955
• feat: add output for head sha by @​peter-evans in https://github.com/peter-evans/create-pull-request/pull/976
• Update distribution by @​github-actions in https://github.com/peter-evans/create-pull-request/pull/981

Full Changelog: peter-evans/create-pull-request@v3.10.1...v3.11.0

v3.10.1: Create Pull Request v3.10.1

Compare Source

• Minor fix to add missing outputs to the actions.yml metadata

v3.10.0: Create Pull Request v3.10.0

Compare Source

• Adds support for the https_proxy environment variable to allow the action to be used on self-hosted runners behind a corporate proxy.

v3.9.2: Create Pull Request v3.9.2

Compare Source

• Minor improvement to the log output during create/update of pull requests.

v3.9.1: Create Pull Request v3.9.1

Compare Source

• Removes the input gpg-sign, added in 3.9.0. The input is unnecessary and GPG commit signature verification works without it. See the documentation for usage details.

v3.9.0: Create Pull Request v3.9.0

Compare Source

• Adds new input gpg-sign to enable GPG commit signature verification. See the documentation for usage details.

v3.8.2: Create Pull Request v3.8.2

Compare Source

• Fixes a bug with assignees that was introduced in release v3.8.1.

v3.8.1: Create Pull Request v3.8.1

Compare Source

• Fixes an issue where the pull request fields labels and assignees were being reset on update. They are now added to, preserving any additional content.

v3.8.0: Create Pull Request v3.8.0

Compare Source

• Adds a new output, pull-request-operation, that returns the operation performed by the action, created, updated or closed.

v3.7.0: Create Pull Request v3.7.0

Compare Source

• Adds support for GitHub Enterprise Server

v3.6.0: Create Pull Request v3.6.0

Compare Source

• A performance improvement for very large repositories and/or repositories with a long git history.

v3.5.2: Create Pull Request v3.5.2

Compare Source

• Minor error handling fix

v3.5.1: Create Pull Request v3.5.1

Compare Source

• Fixes an issue for self-hosted runners where a stale remote ref prevented the pull request branch being pushed to the remote. https://github.com/peter-evans/create-pull-request/pull/637

v3.5.0: Create Pull Request v3.5.0

Compare Source

• Performance improvements to cater for pull requests with very large diffs

v3.4.1: Create Pull Request v3.4.1

Compare Source

• Dependency updates (Removes the Actions runner warning about set-env deprecation)

v3.4.0: Create Pull Request v3.4.0

Compare Source

• Adds the action output pull-request-url, the URL of the created or updated pull request.

v3.3.0: Create Pull Request v3.3.0

Compare Source

• Fixes a bug that occurred when squash merging pull requests and leaving the branch undeleted
• Adds a delete-branch input. When true the action deletes the branch when closing pull requests, and when undeleted after merging.

v3.2.0: Create Pull Request v3.2.0

Compare Source

• Adds support for workflow events that checkout a commit and leave repositories in a "detached HEAD" state. The action can now handle this situation provided it is supplied with the base input. See events which checkout a commit.

v3.1.2: Create Pull Request v3.1.2

Compare Source

• Fixes a bug where the action would fail to create a pull request for branches that are already up to date. This condition can occur when closing a pull request and not deleting the branch.

v3.1.1: Create Pull Request v3.1.1

Compare Source

• Fixes a minor issue when using push-to-fork. It's now possible for the fork's branch to be the same name as the parent's base.

v3.1.0: Create Pull Request v3.1.0

Compare Source

• Adds input signoff which when set to true will add a Signed-off-by line by the committer at the end of the commit log message. This allows created pull requests to meet requirements set by some projects for commits to adhere to the Developers Certificate of Origin (DCO).

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Montreal, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[patheard]

• https://github.com/cds-snc/platform-core-services/issues/497