build(deps): bump the github-actions group with 3 updates (#1863)

Bumps the github-actions group with 3 updates: [anchore/sbom-action](https://github.com/anchore/sbom-action), [xt0rted/pull-request-comment-branch](https://github.com/xt0rted/pull-request-comment-branch) and [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `anchore/sbom-action` from 0.17.7 to 0.17.8
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](anchore/sbom-action@v0.17.7...v0.17.8)

Updates `xt0rted/pull-request-comment-branch` from 2 to 3
- [Release notes](https://github.com/xt0rted/pull-request-comment-branch/releases)
- [Changelog](https://github.com/xt0rted/pull-request-comment-branch/blob/main/CHANGELOG.md)
- [Commits](xt0rted/pull-request-comment-branch@v2...v3)

Updates `codecov/codecov-action` from 5.0.2 to 5.0.7
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5.0.2...v5.0.7)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: xt0rted/pull-request-comment-branch
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/image.yml

@@ -107,7 +107,7 @@ jobs:
           push-to-registry: ${{ inputs.pushImage }}
 
       - name: Generate SBOM
-        uses: anchore/[email protected].7
+        uses: anchore/[email protected].8
         with:
           image: quay.io/sustainable_computing_io/${{matrix.IMAGE_NAME}}:${{matrix.LABEL}}
           artifact-name: sbom-${{matrix.IMAGE_NAME}}-${{matrix.LABEL}}.json

.github/workflows/mock_acpi.yml

@@ -17,7 +17,7 @@ jobs:
       # we need to get the branch of the pull request
       - name: Get PR branch
         id: pr_branch
-        uses: xt0rted/pull-request-comment-branch@v2
+        uses: xt0rted/pull-request-comment-branch@v3
       # Since `issue_comment` event workflow will not appear on the
       # pull request page, we need to set the status of the job
       # in order to attach it to the pull request itself

.github/workflows/unit_test.yml

@@ -40,7 +40,7 @@ jobs:
 
       - name: Upload coverage reports to Codecov
         if: github.event_name != 'pull_request'
-        uses: codecov/[email protected].2
+        uses: codecov/[email protected].7
         with:
           fail_ci_if_error: false # because codecov updates occasionally fail
           files: coverage.out