Update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/checkout	action	minor	v4.1.7 -> v4.2.0
github/codeql-action	action	patch	v3.26.8 -> v3.26.11
public.ecr.aws/amazonlinux/amazonlinux	final	patch	2023.5.20240916.0 -> 2023.5.20241001.1
starlette (changelog)	dependencies	minor	0.38.6 -> 0.39.2
uvicorn (changelog)	dependencies	minor	0.30.6 -> 0.31.0

---

Release Notes

actions/checkout (actions/checkout)

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in https://github.com/actions/checkout/pull/1180
• Dependency updates by @​dependabot- https://github.com/actions/checkout/pull/1777, https://github.com/actions/checkout/pull/1872

github/codeql-action (github/codeql-action)

v3.26.11

Compare Source

v3.26.10

Compare Source

v3.26.9

Compare Source

encode/starlette (starlette)

v0.39.2: Version 0.39.2

Compare Source

Fixed

• Allow use of request.url_for when only "app" scope is available #​2672.
• Fix internal type hints to support python-multipart==0.0.12 #​2708.

---

Full Changelog: encode/starlette@0.39.1...0.39.2

v0.39.1: Version 0.39.1

Compare Source

Fixed

• Avoid regex re-compilation in responses.py and schemas.py #​2700.
• Improve performance of get_route_path by removing regular expression usage #​2701.
• Consider FileResponse.chunk_size when handling multiple ranges #​2703.
• Use token_hex for generating multipart boundary strings #​2702.

---

Full Changelog: encode/starlette@0.39.0...0.39.1

v0.39.0: Version 0.39.0

Compare Source

Added

• Add support for HTTP Range to FileResponse #​2697

---

Full Changelog: encode/starlette@0.38.6...0.39.0

encode/uvicorn (uvicorn)

v0.31.0

Compare Source

Added

Improve ProxyHeadersMiddleware (#​2468) and (#​2231):

• Fix the host for requests from clients running on the proxy server itself.
• Fallback to host that was already set for empty x-forwarded-for headers.
• Also allow to specify IP Networks as trusted hosts. This greatly simplifies deployments
  on docker swarm/kubernetes, where the reverse proxy might have a dynamic IP.
  • This includes support for IPv6 Address/Networks.

---

Configuration

📅 Schedule: Branch creation - "every 1 hours every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: poetry.lock

Updating dependencies
Resolving dependencies...

Creating virtualenv ms-scorecard-4eypPZZG-py3.12 in /home/ubuntu/.cache/pypoetry/virtualenvs

Because ms-scorecard depends on fastapi (0.115.0) which depends on starlette (>=0.37.2,<0.39.0), starlette is required.
So, because ms-scorecard depends on starlette (0.39.2), version solving failed.