14 Pull requests merged by 4 people

• Bump github/codeql-action from 3.28.15 to 3.28.16

  #1216 merged Apr 24, 2025

• Bump step-security/harden-runner from 2.11.1 to 2.12.0

  #1215 merged Apr 22, 2025

• [pre-commit.ci] pre-commit autoupdate

  #1214 merged Apr 22, 2025

• Bump actions/download-artifact from 3.0.2 to 4.2.1

  #1213 merged Apr 18, 2025

• Bump crazy-max/ghaction-github-labeler from 3.1.1 to 5.3.0

  #1211 merged Apr 18, 2025

• Bump pypa/gh-action-pypi-publish from 1.8.3 to 1.12.4

  #1212 merged Apr 18, 2025

• Bump actions/upload-artifact from 3.1.2 to 4.6.2

  #1210 merged Apr 18, 2025

• Bump actions/checkout from 2.3.3 to 4.2.2

  #1208 merged Apr 18, 2025

• Bump ossf/scorecard-action from 2.4.0 to 2.4.1

  #1206 merged Apr 18, 2025

• Bump slsa-framework/slsa-github-generator from 1.5.0 to 2.1.0

  #1205 merged Apr 18, 2025

• Bump actions/setup-python from 4.2.0 to 5.5.0

  #1207 merged Apr 18, 2025

• Bump github/codeql-action from 1.1.39 to 3.28.15

  #1204 merged Apr 18, 2025

• Create SECURITY.md

  #1209 merged Apr 17, 2025

• [StepSecurity] Apply security best practices

  #1203 merged Apr 17, 2025