Bump the github-actions group across 1 directory with 2 updates

Bumps the github-actions group with 2 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action) and [poseidon/wait-for-status-checks](https://github.com/poseidon/wait-for-status-checks).


Updates `github/codeql-action` from 3.26.6 to 3.27.5
- [Release notes](https://github.com/github/codeql-action/releases)
- [Commits](github/codeql-action@v3.26.6...v3.27.5)

Updates `poseidon/wait-for-status-checks` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/poseidon/wait-for-status-checks/releases)
- [Commits](poseidon/wait-for-status-checks@6988432...899c768)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: poseidon/wait-for-status-checks
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>

.github/workflows/cifuzz.yml

@@ -55,7 +55,7 @@ jobs:
         path: ./out/artifacts   
     - name: Upload Sarif
       if: always() && steps.build.outcome == 'success'
-      uses: github/codeql-action/upload-sarif@v3.26.6
+      uses: github/codeql-action/upload-sarif@v3.27.5
       with:
         # Path to SARIF file relative to the root of the repository
         sarif_file: cifuzz-sarif/results.sarif

.github/workflows/scorecard.yml

@@ -59,6 +59,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@9b41ced437d4a4f34bf0b740f80b4e52d3c4bccd # v2.25.15
+        uses: github/codeql-action/upload-sarif@3d3d628990a5f99229dd9fa1821cc5a4f31b613b # v2.25.15
         with:
           sarif_file: results.sarif

.github/workflows/wait-for-checks.yml

@@ -20,7 +20,7 @@ jobs:
       checks: read
     steps:
     - name: Wait for Triggered Required GH Checks
-      uses: poseidon/wait-for-status-checks@6988432d64ad3f9c2608db4ca16fded1b7d36ead # v0.5.0
+      uses: poseidon/wait-for-status-checks@899c768d191b56eef585c18f8558da19e1f3e707 # v0.6.0
       with:
         token: ${{ secrets.GITHUB_TOKEN }}
         # This regex matches everything since almost all (if not all) CI checks are required.