build(deps): bump astral-sh/ruff-action from 3.5.1 to 3.6.1 (#4410)

[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [astral-sh/ruff-action](https://github.com/astral-sh/ruff-action)
from 3.5.1 to 3.6.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/astral-sh/ruff-action/releases">astral-sh/ruff-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.6.1 🌈 fix automatic minor tag updates</h2>
<h2>Changes</h2>
<p>This is just a bugfix release for the release process</p>
<ul>
<li>fix: persist credentials for git push in update-major-minor-tags
workflow <a
href="https://github.com/eifinger-bot"><code>@​eifinger-bot</code></a>
(<a
href="https://redirect.github.com/astral-sh/ruff-action/issues/312">#312</a>)</li>
</ul>
<h2>🧰 Maintenance</h2>
<ul>
<li>ci: add zizmor security linting <a
href="https://github.com/eifinger-bot"><code>@​eifinger-bot</code></a>
(<a
href="https://redirect.github.com/astral-sh/ruff-action/issues/313">#313</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/astral-sh/ruff-action/commit/4919ec5cf1f49eff0871dbcea0da843445b837e6"><code>4919ec5</code></a>
fix: persist credentials for git push in update-major-minor-tags
workflow (<a
href="https://redirect.github.com/astral-sh/ruff-action/issues/312">#312</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff-action/commit/1977806bc6b3338361b0838b777e04196bca2b72"><code>1977806</code></a>
ci: add zizmor security linting (<a
href="https://redirect.github.com/astral-sh/ruff-action/issues/313">#313</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff-action/commit/aedff8d295e5eafdfcc21db7dfdce8cab2c55e7b"><code>aedff8d</code></a>
Bump dependencies and actions (<a
href="https://redirect.github.com/astral-sh/ruff-action/issues/311">#311</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff-action/commit/191187a20a1b6d3c631f1a14616574c0e454d4b5"><code>191187a</code></a>
Bump actions/checkout from 5.0.0 to 6.0.1 (<a
href="https://redirect.github.com/astral-sh/ruff-action/issues/278">#278</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff-action/commit/ecac2cc03c9edd40f04729337e37290665ce39dd"><code>ecac2cc</code></a>
Bump github/codeql-action from 3.30.5 to 4.31.10 (<a
href="https://redirect.github.com/astral-sh/ruff-action/issues/294">#294</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff-action/commit/ddb8c29960de165bc0008f9c6111581482e517f5"><code>ddb8c29</code></a>
Bump actions/setup-node from 6.0.0 to 6.2.0 (<a
href="https://redirect.github.com/astral-sh/ruff-action/issues/296">#296</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff-action/commit/5eee2a4332c5430ddb4c30597986a81190636956"><code>5eee2a4</code></a>
search in parent dir (<a
href="https://redirect.github.com/astral-sh/ruff-action/issues/306">#306</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff-action/commit/1d756c4b80bac71f01114a56c83cdfd6fd6ab888"><code>1d756c4</code></a>
chore: update known checksums for 0.14.13/0.14.14 (<a
href="https://redirect.github.com/astral-sh/ruff-action/issues/297">#297</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff-action/commit/fde82cb611966a39d9e630941cb9fa69e22ad4d5"><code>fde82cb</code></a>
Fix CI: Pin ruff version to stable 0.13.x in test fixture (<a
href="https://redirect.github.com/astral-sh/ruff-action/issues/305">#305</a>)</li>
<li><a
href="https://github.com/astral-sh/ruff-action/commit/deb632007bfb6d4a15bb00646af6eb714a34f079"><code>deb6320</code></a>
ignore environment markers in dep specs (<a
href="https://redirect.github.com/astral-sh/ruff-action/issues/295">#295</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/astral-sh/ruff-action/compare/57714a7c8a2e59f32539362ba31877a1957dded1...4919ec5cf1f49eff0871dbcea0da843445b837e6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=astral-sh/ruff-action&package-manager=github_actions&previous-version=3.5.1&new-version=3.6.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/check.yml

@@ -39,7 +39,7 @@ jobs:
         run: go tool -modfile=tools/go.mod golangci-lint run --timeout=15m
 
       - name: Run ruff (Python linter and formatter)
-        uses: astral-sh/ruff-action@57714a7c8a2e59f32539362ba31877a1957dded1 # v3.5.1
+        uses: astral-sh/ruff-action@4919ec5cf1f49eff0871dbcea0da843445b837e6 # v3.6.1
         with:
           version: "0.9.1"
           args: "format --check"