chore(deps): bump the github-actions group across 1 directory with 9 updates

[dependabot]

Bumps the github-actions group with 9 updates in the / directory:

Package	From	To
bemanproject/infra-workflows/.github/workflows/reusable-beman-submodule-check.yml	1.7.3	1.7.4
bemanproject/infra-workflows/.github/workflows/reusable-beman-preset-test.yml	1.7.3	1.7.4
bemanproject/infra-workflows/.github/workflows/reusable-beman-build-and-test.yml	1.7.3	1.7.4
bemanproject/infra-workflows/.github/workflows/reusable-beman-vcpkg-ci.yml	1.7.3	1.7.4
bemanproject/infra-workflows/.github/workflows/reusable-beman-create-issue-when-fault.yml	1.7.3	1.7.4
step-security/harden-runner	2.20.0	2.21.1
bemanproject/infra-workflows/.github/workflows/reusable-beman-pre-commit.yml	1.7.3	1.7.4
bemanproject/infra-workflows/.github/workflows/reusable-beman-update-pre-commit.yml	1.7.3	1.7.4
bemanproject/infra-workflows/.github/workflows/reusable-beman-vcpkg-release.yml	1.7.3	1.7.4

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-submodule-check.yml from 1.7.3 to 1.7.4

Commits

• 38e1dc5 vcpkg CI: Use system CMake and pin vcpkg version to the commit in vcpkg-confi...
• d2f6d67 Pin CMake version 4.3.3 for all CI jobs
• See full diff in compare view

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-preset-test.yml from 1.7.3 to 1.7.4

Commits

• 38e1dc5 vcpkg CI: Use system CMake and pin vcpkg version to the commit in vcpkg-confi...
• d2f6d67 Pin CMake version 4.3.3 for all CI jobs
• See full diff in compare view

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-build-and-test.yml from 1.7.3 to 1.7.4

Commits

• 38e1dc5 vcpkg CI: Use system CMake and pin vcpkg version to the commit in vcpkg-confi...
• d2f6d67 Pin CMake version 4.3.3 for all CI jobs
• See full diff in compare view

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-vcpkg-ci.yml from 1.7.3 to 1.7.4

Commits

• 38e1dc5 vcpkg CI: Use system CMake and pin vcpkg version to the commit in vcpkg-confi...
• d2f6d67 Pin CMake version 4.3.3 for all CI jobs
• See full diff in compare view

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-create-issue-when-fault.yml from 1.7.3 to 1.7.4

Commits

• 38e1dc5 vcpkg CI: Use system CMake and pin vcpkg version to the commit in vcpkg-confi...
• d2f6d67 Pin CMake version 4.3.3 for all CI jobs
• See full diff in compare view

Updates step-security/harden-runner from 2.20.0 to 2.21.1

Release notes

Sourced from step-security/harden-runner's releases.

v2.21.1

What's Changed

• Improved performance of the disable-sudo feature.
• Fixed an issue in the Community tier where new endpoints required by the GitHub Actions runner were not being implicitly allowed in block mode.
• Fixed the Harden-Runner post step failing on Linux distributions that do not have a merged /usr filesystem layout (for example Debian 11), where /usr/bin/echo does not exist. This mainly affected self-hosted runners.
• Documentation updates: clarified which features are in the Community (free) vs Enterprise tier.

Full Changelog: step-security/harden-runner@v2.21.0...v2.21.1

v2.21.0

What's Changed

• Support for denied endpoints in block mode. This is included in the enterprise tier. Customers can deny outbound calls, for example, to public package registries.
• Improved Support for AWS CodeBuild GitHub Actions Runners.
• Bug fixes.

Full Changelog: step-security/harden-runner@v2.20.1...v2.21.0

v2.20.1

What's Changed

• AWS CodeBuild-hosted runner support
• Implicitly allow single-labeled (internal) domains in block-mode

Full Changelog: step-security/harden-runner@v2.20.0...v2.20.1

Commits

• e14015d Merge pull request #690 from step-security/rc-43
• 9001249 docs: update harden-runner version pin to v2.21.0 in getting started example
• a447fba docs: expand enterprise feature list and document custom VM and ubuntu-slim l...
• b0eaf8d docs: clarify community vs enterprise tiers and add maintained actions section
• 063e8e3 Merge pull request #687 from rohan-stepsecurity/rp/fix/bin-echo-fallback
• f46bdc1 chore: bump agent-ebpf to v1.9.1 and agent to v0.16.3
• 42e6daa fix: fall back to /bin/echo for non-usr-merged distros
• 05e3151 Merge pull request #684 from step-security/rc-42
• 0f37afa fix: ignore denied-endpoints on non-enterprise tier
• 93b58ee fix: resolve cache host read-first and never downgrade egress policy
• Additional commits viewable in compare view

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-pre-commit.yml from 1.7.3 to 1.7.4

Commits

• 38e1dc5 vcpkg CI: Use system CMake and pin vcpkg version to the commit in vcpkg-confi...
• d2f6d67 Pin CMake version 4.3.3 for all CI jobs
• See full diff in compare view

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-update-pre-commit.yml from 1.7.3 to 1.7.4

Commits

• 38e1dc5 vcpkg CI: Use system CMake and pin vcpkg version to the commit in vcpkg-confi...
• d2f6d67 Pin CMake version 4.3.3 for all CI jobs
• See full diff in compare view

Updates bemanproject/infra-workflows/.github/workflows/reusable-beman-vcpkg-release.yml from 1.7.3 to 1.7.4

Commits

• 38e1dc5 vcpkg CI: Use system CMake and pin vcpkg version to the commit in vcpkg-confi...
• d2f6d67 Pin CMake version 4.3.3 for all CI jobs
• See full diff in compare view