chore(deps): bump the github-actions group with 3 updates

[dependabot]

Bumps the github-actions group with 3 updates: step-security/harden-runner, release-drafter/release-drafter and dtolnay/rust-toolchain.

Updates step-security/harden-runner from 2.21.1 to 2.22.0

Release notes

Sourced from step-security/harden-runner's releases.

v2.22.0

What's Changed

• Linux ARM64 support for community tier
• GHES support for self-hosted VMs (enterprise tier)
• MacOS and Windows runner deny list support for block policy (enterprise tier).

Full Changelog: step-security/harden-runner@v2.21.1...v2.22.0

Commits

• 351661c Merge pull request #701 from step-security/rc-44
• 1dc7f2e Merge pull request #702 from h0x0er/jatin/ghes-changes-up
• af5ca38 simplified ghes config creation
• 9a6d710 fix2
• 74c65ea fix
• ceac816 resovled comments
• 2439321 refactoring for codebuild
• e28e09b Revert "job summary fixes for ghes"
• e38f7a0 job summary fixes for ghes
• 468d34b fixed insights url for ghes scenario
• Additional commits viewable in compare view

Updates release-drafter/release-drafter from 7.7.0 to 7.9.0

Release notes

Sourced from release-drafter/release-drafter's releases.

v7.9.0

What's Changed

New

• feat(autolabeler): sync configured pull request labels (#1787) @​jetersen
• feat(autolabeler): support multiple labels, stop rules and fallback (#1785) @​jetersen
• feat: expose PR labels in Drafter and Check PR outputs (#1782) @​jetersen
• feat: add resolved tag template variable (#1784) @​jetersen

Dependency Updates

• ci(deps): update reviewdog/action-actionlint action to v1.77.0 (#1781) @​renovate[bot]

Bug Fixes

• fix(config): provide standard loading for the programmatic API (#1783) @​jetersen
• fix: skip the missing-baseline warning when from is set (#1789) @​jmeridth

Maintenance

• chore: release v7.9.0 (#1790) @​release-drafter-releaser[bot]
• ci: dogfood Release Drafter and stage npm publishing (#1778) @​jetersen
• ci: lint GitHub Actions workflows with actionlint (#1780) @​jetersen

New Contributors

• No new contributors

Full Changelog: release-drafter/release-drafter@v7.8.0...v7.9.0

v7.8.0

What's Changed

Token authentication change

The token action input now takes precedence over env.GITHUB_TOKEN and defaults to ${{ github.token }}. Pass a PAT or GitHub App token through with.token, especially when publishing releases that should trigger downstream workflows:

with:
  token: ${{ secrets.PAT }}
  publish: true

New

• feat: merge repeated changes with group-changes (#1725) @​slawekjaranowski, @​claude
• feat(facade): wire multiforge adapters (#1709) @​jetersen
• feat(adapters): add GitLab REST adapter (#1708) @​jetersen
• feat(adapters): add Gitea and Forgejo REST adapters (#1707) @​jetersen

... (truncated)

Commits

• 72967cd chore: release v7.9.0 (#1790)
• 43cd2a9 feat(autolabeler): sync configured pull request labels (#1787)
• a99850f feat(autolabeler): support multiple labels, stop rules and fallback (#1785)
• 26b7080 feat: expose PR labels in Drafter and Check PR outputs (#1782)
• 58b89af feat: add resolved tag template variable (#1784)
• 7aa25ba fix(config): provide standard loading for the programmatic API (#1783)
• 1e80012 fix: skip the missing-baseline warning when from is set (#1789)
• 57f4179 ci: dogfood Release Drafter and stage npm publishing (#1778)
• 75620c0 ci(deps): update reviewdog/action-actionlint action to v1.77.0 (#1781)
• fb48a58 ci: lint GitHub Actions workflows with actionlint (#1780)
• Additional commits viewable in compare view

Updates dtolnay/rust-toolchain from 02cb101ec7c40f2c49e1d9714d64511d8e1b74de to 7e38f4b43b4db5c8dd498af069a4f6196df1d067

Commits

• 7e38f4b Merge pull request #186 from WaterWhisperer/feat/retry-install
• 7645b07 Retry release-server checksum failures
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions