chore(ci): Update GitHub Actions

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/attest-build-provenance	action	minor	v3.1.0 → v3.2.0
actions/checkout (changelog)	action	digest	8e8c483 → de0fac2
actions/github-script (changelog)	action	digest	60a0d83 → f28e40c
github/codeql-action	action	minor	v4.31.11 → v4.32.2
prefix-dev/setup-pixi	action	patch	v0.9.3 → v0.9.4
taiki-e/setup-cross-toolchain-action (changelog)	action	digest	d30d20f → b8d1a32

---

Release Notes

actions/attest-build-provenance (actions/attest-build-provenance)

v3.2.0

Compare Source

What's Changed

• Bump @​actions/core from 1.11.1 to 2.0.1 by @​dependabot[bot] in #​776
• Add more documentation on Artifact Metadata Storage Records by @​malancas in #​797
• Update actions/attest to latest version v3.2.0 by @​malancas in #​812

Full Changelog: actions/attest-build-provenance@v3.1.0...v3.2.0

github/codeql-action (github/codeql-action)

v4.32.2

Compare Source

v4.32.1

Compare Source

• A warning is now shown in Default Setup workflow logs if a private package registry is configured using a GitHub Personal Access Token (PAT), but no username is configured. #​3422
• Fixed a bug which caused the CodeQL Action to fail when repository properties cannot successfully be retrieved. #​3421

v4.32.0

Compare Source

• Update default CodeQL bundle version to 2.24.0. #​3425

prefix-dev/setup-pixi (prefix-dev/setup-pixi)

v0.9.4

Compare Source

What's Changed

✨ New features

• Implement working directory setup by @​retrry in #​236

👷🏻 CI

• ci: Remove macos-13 tests by @​pavelzw in #​240

⬆️ Dependency updates

• chore(deps): bump the gh-actions group with 3 updates by @​dependabot[bot] in #​238
• chore(deps): bump the nodejs group with 9 updates by @​dependabot[bot] in #​239
• chore(deps): bump the gh-actions group with 5 updates by @​dependabot[bot] in #​243
• chore(deps): bump the nodejs group with 10 updates by @​dependabot[bot] in #​244

New Contributors

• @​retrry made their first contribution in #​236

Full Changelog: prefix-dev/setup-pixi@v0.9.3...v0.9.4

---

Configuration

📅 Schedule: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.