build(deps): Bump SeanLF/still_active-action from 0.4.1 to 0.5.0 in the actions group

[dependabot]

Bumps the actions group with 1 update: SeanLF/still_active-action.

Updates SeanLF/still_active-action from 0.4.1 to 0.5.0

Release notes

Sourced from SeanLF/still_active-action's releases.

v0.5.0 — answer cache across runs

v0.5.0 (2026-09-24)

• still_active's answer cache is kept across runs (still_active ≥ 3.2.0). The cache is restored before the audit and saved after it, even when a gate fails. Each invocation saves under its own key, and the cache's own lifetimes decide what's still good: which advisories affect a version for one hour, advisory scores for six. So a restored cache can't hide a new advisory for longer than it would locally. The key is exposed as the cache-key output. (#11)
• New cache input, default true. false skips the cache and passes --no-cache (still_active ≥ 3.2.0). Set it on a self-hosted runner older than 2.327.1 (actions/cache needs it), or in a pull_request_target workflow that runs untrusted code before this action.

Full Changelog: SeanLF/still_active-action@v0.4.1...v0.5.0

Commits

• 03e8506 feat: keep still_active's answer cache across runs (#11)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions