🌱 Bump the github-actions group with 2 updates (#1510)

dependabot[bot] · web-flow · commit 2722664778d4 · 2025-02-18T15:06:40.000Z
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -31,7 +31,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
+        uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
         with:
           egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
 
diff --git a/.github/workflows/golangci.yml b/.github/workflows/golangci.yml
@@ -21,7 +21,7 @@ jobs:
         with:
           go-version-file: go.mod
           cache: false # golangci/golangci-lint-action maintains its own cache
-      - uses: golangci/golangci-lint-action@051d91933864810ecd5e2ea2cfd98f6a5bca5347 # v6.3.2
+      - uses: golangci/golangci-lint-action@2226d7cb06a077cd73e56eedd38eecad18e5d837 # v6.5.0
         with:
           version: v1.55.2
           only-new-issues: true
