Bump the github-actions group with 2 updates (#615)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/sast.yml

@@ -32,12 +32,12 @@ jobs:
                   results_file: "results.sarif"
                   results_format: "sarif"
                   publish_results: true
-            - uses: "actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882"
+            - uses: "actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b"
               with:
                   name: "SARIF file"
                   path: "results.sarif"
                   retention-days: 5
-            - uses: "github/codeql-action/upload-sarif@df409f7d9260372bd5f19e5b04e83cb3c43714ae"
+            - uses: "github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169"
               with:
                   sarif_file: "results.sarif"
 
@@ -51,7 +51,7 @@ jobs:
 
         steps:
             - uses: "actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683"
-            - uses: "github/codeql-action/init@df409f7d9260372bd5f19e5b04e83cb3c43714ae"
+            - uses: "github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169"
               with:
                   languages: "typescript"
             - uses: "pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2"
@@ -62,4 +62,4 @@ jobs:
                   node-version-file: ".nvmrc"
                   cache: "pnpm"
             - run: "make install"
-            - uses: "github/codeql-action/analyze@df409f7d9260372bd5f19e5b04e83cb3c43714ae"
+            - uses: "github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169"