fix(deps): update npm

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@actions/core (source)	1.10.0 -> 1.10.1
@octokit/webhooks-types	7.0.0 -> 7.3.1
sigstore (source)	1.8.0 -> 1.9.0
yaml (source)	2.3.1 -> 2.3.2

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

actions/toolkit (@​actions/core)

v1.10.1

• Fix error message reference in oidc utils #​1511

octokit/webhooks (@​octokit/webhooks-types)

v7.3.1

Compare Source

Bug Fixes

• declare pull_request auto_merge properties as string|null (#​829) (c8983a4)

v7.3.0

Compare Source

Features

• examples: add GitHub Enterprise Server versions (#​841) (1983486)

v7.2.0

Compare Source

Features

• add support for deployment_review event (#​816) (4e36ca2)

v7.1.0

Compare Source

Features

• new and updated payload examples with resulting schema changes (#​813) (9f7f7f3), closes #​812

v7.0.3

Compare Source

Bug Fixes

• update wont_fix typo in secret_scanning_alert (#​807) (b709535)

v7.0.2

Compare Source

Bug Fixes

• mark action as required in secret_scanning_alert_location.created event (#​801) (39fb367)

v7.0.1

Compare Source

Bug Fixes

• deps: update dependency @​octokit/webhooks-types to v7 (#​802) (2051599)

sigstore/sigstore-js (sigstore)

v1.9.0

Compare Source

Minor Changes

• 75ba6cd: Integrate @sigstore/sign package
• e44f05c: Use bundle construction helpers from @sigstore/bundle package

Patch Changes

• 9b8c140: Fix bug in inclusion proof verification
• Updated dependencies [fe31654]
• Updated dependencies [5de42a0]
• Updated dependencies [84eee0b]
• Updated dependencies [abcebbf]
  • @​sigstore/sign@​1.0.0
  • @​sigstore/bundle@​1.1.0

eemeli/yaml (yaml)

v2.3.2

Compare Source

• Fix docs typo (#​489)
• Do not require quotes for implicit keys with flow indicators (#​494)
• Update Prettier to v3 & update ESLint config

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.