deps: bump the production-dependencies group with 8 updates

Bumps the production-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `3` | `4` |
| [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.7.1` | `3.10.0` |
| [docker/login-action](https://github.com/docker/login-action) | `3.3.0` | `3.4.0` |
| [docker/metadata-action](https://github.com/docker/metadata-action) | `5.5.1` | `5.7.0` |
| [docker/build-push-action](https://github.com/docker/build-push-action) | `6.9.0` | `6.15.0` |
| [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.7.0` | `3.8.1` |
| [anchore/scan-action](https://github.com/anchore/scan-action) | `5.2.1` | `6.1.0` |
| [advanced-security/reusable-workflows](https://github.com/advanced-security/reusable-workflows) | `0.2.0` | `0.3.0` |


Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v3...v4)

Updates `docker/setup-buildx-action` from 3.7.1 to 3.10.0
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@c47758b...b5ca514)

Updates `docker/login-action` from 3.3.0 to 3.4.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@9780b0c...74a5d14)

Updates `docker/metadata-action` from 5.5.1 to 5.7.0
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@8e5442c...902fa8e)

Updates `docker/build-push-action` from 6.9.0 to 6.15.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@4f58ea7...471d1dc)

Updates `sigstore/cosign-installer` from 3.7.0 to 3.8.1
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@dc72c7d...d7d6bc7)

Updates `anchore/scan-action` from 5.2.1 to 6.1.0
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](anchore/scan-action@f2ba85e...7c05671)

Updates `advanced-security/reusable-workflows` from 0.2.0 to 0.3.0
- [Release notes](https://github.com/advanced-security/reusable-workflows/releases)
- [Changelog](https://github.com/advanced-security/reusable-workflows/blob/main/.release.yml)
- [Commits](v0.2.0...v0.3.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: anchore/scan-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: advanced-security/reusable-workflows
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

.github/workflows/container-publish.yml

@@ -47,17 +47,17 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
 
       - name: Log in to the Container registry
-        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set Container Metadata
-        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804
         id: meta
         with:
           images: ${{ env.REGISTRY }}/${{ inputs.container-name }}
@@ -71,7 +71,7 @@ jobs:
             type=semver,pattern=v{{major}}.{{minor}},value=${{ inputs.version }}
     
       - name: Build & Publish Container ${{ inputs.container-name }}
-        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
+        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
         id: build
         with:
           file: "${{ inputs.container-file }}"
@@ -103,12 +103,12 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@v4
 
-      - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
+      - uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
         with:
           cosign-release: 'v2.4.1'
 
       - name: Log in to the Container registry
-        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}

.github/workflows/container-security.yml

@@ -38,10 +38,10 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
 
       - name: Build Initial Container
-        uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
+        uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
         id: build
         with:
           file: "${{ inputs.container-file }}"
@@ -52,7 +52,7 @@ jobs:
 
       # Scan the image for vulnerabilities
       - name: Run the Anchore / Grype scan action
-        uses: anchore/scan-action@f2ba85e044c8f5e5014c9a539328a9c78d3bfa49 # v5.2.1
+        uses: anchore/scan-action@7c05671ae9be166aeb155bad2d7df9121823df32 # v6.1.0
         id: scan
         with:
           image: localbuild/testimage:latest

.github/workflows/python-release.yml

@@ -57,7 +57,7 @@ jobs:
           fi
 
   github-release:
-    uses: advanced-security/reusable-workflows/.github/workflows/release.yml@v0.2.0
+    uses: advanced-security/reusable-workflows/.github/workflows/release.yml@v0.3.0
     needs: [ version-changes ]
     if: ${{ needs.version-changes.outputs.release == 'true' }}
     secrets: inherit

.github/workflows/python.yml

@@ -26,22 +26,22 @@ on:
 jobs:
   # Run the tests on all supported versions of Python
   testing:
-    uses: advanced-security/reusable-workflows/.github/workflows/python-testing.yml@v0.2.0
+    uses: advanced-security/reusable-workflows/.github/workflows/python-testing.yml@v0.3.0
     secrets: inherit
     with:
       versions: ${{ inputs.versions }}
 
   # Run linters on the codebase
   linting:
-    uses: advanced-security/reusable-workflows/.github/workflows/python-linting.yml@v0.2.0
+    uses: advanced-security/reusable-workflows/.github/workflows/python-linting.yml@v0.3.0
     needs: [ testing ]
     secrets: inherit
     with:
       versions: ${{ inputs.versions }}
 
   # Vendor the dependencies into the repository if needed
   vendoring:
-    uses: advanced-security/reusable-workflows/.github/workflows/python-vendor.yml@v0.2.0
+    uses: advanced-security/reusable-workflows/.github/workflows/python-vendor.yml@v0.3.0
     needs: [ testing, linting ]
     if: ${{ inputs.vendor == 'true' }}
     secrets: inherit
@@ -51,7 +51,7 @@ jobs:
 
   # Release a new version of the package
   release:
-    uses: advanced-security/reusable-workflows/.github/workflows/python-release.yml@v0.2.0
+    uses: advanced-security/reusable-workflows/.github/workflows/python-release.yml@v0.3.0
     needs: [ testing, linting ]
     secrets: inherit
     with:

.github/workflows/release.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
       - name: "Checkout"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: "Patch Release Me"
         uses: 42ByteLabs/patch-release-me@f950db6bce09f2156a5f2d1cc86ac60ed1663a9e    # 0.5.3

.github/workflows/self-dependency-review.yml

@@ -19,5 +19,5 @@ permissions:
 
 jobs:
   dependency-review:
-    uses: advanced-security/reusable-workflows/.github/workflows/dependency-review.yml@v0.2.0
+    uses: advanced-security/reusable-workflows/.github/workflows/dependency-review.yml@v0.3.0
     secrets: inherit