build(deps): bump the github-actions group across 1 directory with 3 updates

Bumps the github-actions group with 3 updates in the / directory: [sylvainsf/causinator9000](https://github.com/sylvainsf/causinator9000), [securego/gosec](https://github.com/securego/gosec) and [mheap/require-checklist-action](https://github.com/mheap/require-checklist-action).


Updates `sylvainsf/causinator9000` from 2.1.0 to 2.2.0
- [Release notes](https://github.com/sylvainsf/causinator9000/releases)
- [Commits](sylvainsf/causinator9000@ff3e97f...ba057ac)

Updates `securego/gosec` from 2.25.0 to 2.26.1
- [Release notes](https://github.com/securego/gosec/releases)
- [Commits](securego/gosec@223e19b...4a3bd8a)

Updates `mheap/require-checklist-action` from 2.5.0 to 2.6.1
- [Release notes](https://github.com/mheap/require-checklist-action/releases)
- [Commits](mheap/require-checklist-action@46d2ca1...9c8100a)

---
updated-dependencies:
- dependency-name: sylvainsf/causinator9000
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: securego/gosec
  dependency-version: 2.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: mheap/require-checklist-action
  dependency-version: 2.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/c9k-failure-report.yml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Generate CI failure report
-        uses: sylvainsf/causinator9000@ff3e97fcf74f2dd23dc56cf5ddd10f9e1c127eeb # v2.1.0
+        uses: sylvainsf/causinator9000@ba057ac66a8eee6b0f293012ff567afdd49ea6c7 # v2.2.0
         with:
           repo: ${{ github.repository }}
           hours: "48"

.github/workflows/c9k-nightly.yml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Generate CI failure report
-        uses: sylvainsf/causinator9000@ff3e97fcf74f2dd23dc56cf5ddd10f9e1c127eeb # v2.1.0
+        uses: sylvainsf/causinator9000@ba057ac66a8eee6b0f293012ff567afdd49ea6c7 # v2.2.0
         with:
           hours: ${{ github.event.inputs.hours || '24' }}
           min-confidence: "50"

.github/workflows/codeql.yml

@@ -120,7 +120,7 @@ jobs:
 
       - name: Perform GoSec Analysis
         if: matrix.language == 'custom-gosec'
-        uses: securego/gosec@223e19b8856e00f02cc67804499a83f77e208f3c # v2.25.0
+        uses: securego/gosec@4a3bd8af174872c778439083ded7adbf3747e770 # v2.26.1
         with:
           args: -no-fail -fmt sarif -out gosec-results.sarif ./...
         continue-on-error: true

.github/workflows/require-pr-checklist.yaml

@@ -16,6 +16,6 @@ jobs:
       pull-requests: write
     if: github.event.pull_request.user.login != 'dependabot[bot]' # Skip for Dependabot PRs
     steps:
-      - uses: mheap/require-checklist-action@46d2ca1a0f90144bd081fd13a80b1dc581759365 # v2.5.0
+      - uses: mheap/require-checklist-action@9c8100a52aa9726d4648e61aa92415f6c843c990 # v2.6.1
         with:
           requireChecklist: true # If this is true and there are no checklists detected or not filled out, the action will fail