ci(deps): bump matcra587/github-actions/.github/workflows/security.yml from 0.4.2 to 0.4.3 in the actions-minor-patch group

[dependabot]

Bumps the actions-minor-patch group with 1 update: matcra587/github-actions/.github/workflows/security.yml.

Updates matcra587/github-actions/.github/workflows/security.yml from 0.4.2 to 0.4.3

Release notes

Sourced from matcra587/github-actions/.github/workflows/security.yml's releases.

security/v0.4.3

Updates the security workflow to Zizmor 1.30.1 with zizmor-action 0.6.4, including support for self-repository action references (uses: $/...).

The default Zizmor version and the action's supported-version list are compatible. Callers that explicitly override zizmor-version should use 1.30.1 to scan self-repository references.

Also includes the dependency updates already merged into the shared workflow. The existing public-only dependency-review gate and private-repository SARIF suppression remain unchanged.

Reviewed commit: d2ae464e93461998e97ebc72c4f3de40ac0a84df

Consumers should pin actions and reusable workflows to this commit SHA.

Commits

• d2ae464 chore(release): prepare security v0.4.3 (#83)
• 298f23e chore(deps): refresh dependencies with native clover npm support (#82)
• 567504f chore(deps): complete Clover onboarding (#81)
• dfe9428 deps(deps-dev): bump @​types/bun from 1.3.14 to 1.4.0 in /packages/homebrew-pu...
• 3ef483c deps(deps): bump zizmorcore/zizmor-action from 0.6.2 to 0.6.3 (#80)
• f114dc4 deps(deps-dev): bump @​types/bun from 1.3.14 to 1.4.0 in /packages/await-gates...
• 249d36b deps(deps-dev): bump the npm-dependencies group with 3 updates (#68)
• 7c78bdb deps(deps): bump astral-sh/setup-uv from 8.3.2 to 10.0.1 (#79)
• d963bed deps(deps): bump rvben/rumdl from 0.2.55 to 0.2.62 (#73)
• 450a739 deps(deps): bump jdx/mise-action from 4.2.5 to 4.3.0 (#74)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions