chore(deps): ⬆️ update github actions (#148)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action |
patch | `v4.1.5` -> `v4.1.6` |
| [codecov/codecov-action](https://github.com/codecov/codecov-action)
| action | minor | `v4.3.1` -> `v4.4.0` |

---

### Release Notes

<details>
<summary>actions/checkout (actions/checkout)</summary>

###
[`v4.1.6`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v416)

[Compare
Source](https://github.com/actions/checkout/compare/v4.1.5...v4.1.6)

- Check platform to set archive extension appropriately by
[@&#8203;cory-miller](https://github.com/cory-miller) in
[actions/checkout#1732

</details>

<details>
<summary>codecov/codecov-action (codecov/codecov-action)</summary>

###
[`v4.4.0`](https://github.com/codecov/codecov-action/releases/tag/v4.4.0)

[Compare
Source](https://github.com/codecov/codecov-action/compare/v4.3.1...v4.4.0)

#### What's Changed

- chore: Clarify isPullRequestFromFork by
[@&#8203;jsoref](https://github.com/jsoref) in
[codecov/codecov-action#1411
- build(deps): bump actions/checkout from 4.1.4 to 4.1.5 by
[@&#8203;dependabot](https://github.com/dependabot) in
[codecov/codecov-action#1423
- build(deps): bump github/codeql-action from 3.25.3 to 3.25.4 by
[@&#8203;dependabot](https://github.com/dependabot) in
[codecov/codecov-action#1421
- build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 by
[@&#8203;dependabot](https://github.com/dependabot) in
[codecov/codecov-action#1420
- feat: remove GPG and run on spawn by
[@&#8203;thomasrockhu-codecov](https://github.com/thomasrockhu-codecov)
in
[codecov/codecov-action#1426
- build(deps-dev): bump
[@&#8203;typescript-eslint/parser](https://github.com/typescript-eslint/parser)
from 7.8.0 to 7.9.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[codecov/codecov-action#1428
- chore(release): 4.4.0 by
[@&#8203;thomasrockhu-codecov](https://github.com/thomasrockhu-codecov)
in
[codecov/codecov-action#1430

**Full Changelog**:
codecov/codecov-action@v4.3.1...v4.4.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Renovate
Bot](https://github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNjguNiIsInVwZGF0ZWRJblZlciI6IjM3LjM2OC42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: Renovate Bot GitHub <bot@renovateapp.com>

.github/workflows/ci-cd.yml

@@ -45,7 +45,7 @@ jobs:
           NX_REJECT_UNKNOWN_LOCAL_CACHE: 0
 
       - name: Codecov
-        uses: codecov/codecov-action@v4.3.1
+        uses: codecov/codecov-action@v4.4.0
         if: hashFiles('coverage/**/*') != ''
         with:
           directory: coverage

.github/workflows/renovate.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v4.1.5
+        uses: actions/checkout@v4.1.6
 
       - name: Self-hosted Renovate
         uses: renovatebot/github-action@v40.1.11