Update zizmorcore/zizmor-action action to v0.5.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
zizmorcore/zizmor-action	action	minor	v0.3.0 → v0.5.0

---

Release Notes

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.5.0

Compare Source

What's Changed

• Expose output-file as an output when advanced-security: true by @​unlobito in #​87

New Contributors

• @​unlobito made their first contribution in #​87

Full Changelog: zizmorcore/zizmor-action@v0.4.1...v0.5.0

v0.4.1

Compare Source

This version fixes an error in the 0.4.0 release that prevented non-relative use
of the action.

What's Changed

• Fix version file path by @​woodruffw in #​83

Full Changelog: zizmorcore/zizmor-action@v0.4.0...v0.4.1

v0.4.0

Compare Source

This new version of zizmor-action brings two major changes:

• The new fail-on-no-inputs option can be used to control whether
  zizmor-action fails if no inputs were collected by zizmor. The default
  remains true, reflecting the pre-existing behavior.

• The action's use of the official zizmor Docker images is now fully
  hash-checked internally, preventing accidental or malicious modification
  to the images. This also means that subsequent releases of zizmor
  will induce a release of this action, rather than the action always picking
  up the latest version by default.

What's Changed

• docs: extended permissions required for internal repos by @​AntoineSebert in #​61
• docs: clarify description of "token" to indicate it is only used for online audits by @​rmuir in #​63
• Hash-check zizmor Docker images by @​woodruffw in #​68
• Add fail-on-no-inputs option by @​woodruffw in #​67

New Contributors

• @​AntoineSebert made their first contribution in #​61
• @​rmuir made their first contribution in #​63

Full Changelog: zizmorcore/zizmor-action@v0.3.0...v0.4.0

---

Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.