chore(ci): bump the actions group with 4 updates, add zizmor, configure release-mkdocs permissions (#151)

Author: dependabot[bot]

.github/workflows/release.yaml

@@ -10,7 +10,7 @@ on:
 
 jobs:
   release-container:
-    uses: radiorabe/actions/.github/workflows/release-container.yaml@c7aef9928f610ec51b44f84debf2321189276d54 # v0.41.3
+    uses: radiorabe/actions/.github/workflows/release-container.yaml@479996126a091287dc3fd349786f6f8a6dd1b23c # v0.42.0
     with:
       image: ghcr.io/radiorabe/python-minimal
       name: python-minimal
@@ -24,5 +24,12 @@ jobs:
             "containerd-snapshotter": true
           }
         }
-  mkdocs:
-    uses: radiorabe/actions/.github/workflows/release-mkdocs.yaml@c7aef9928f610ec51b44f84debf2321189276d54 # v0.41.3
+  release-mkdocs:
+    permissions:
+      contents: write # Required to push the gh-pages branch for documentation deployment
+    uses: radiorabe/actions/.github/workflows/release-mkdocs.yaml@479996126a091287dc3fd349786f6f8a6dd1b23c # v0.42.0
+  github-actions:
+    permissions:
+      contents: read
+      security-events: write # so zizmor can publish results to the Security tab
+    uses: radiorabe/actions/.github/workflows/test-github-actions.yaml@479996126a091287dc3fd349786f6f8a6dd1b23c # v0.42.0

.github/workflows/schedule.yaml

@@ -7,6 +7,6 @@ on:
 
 jobs:
   schedule-trivy:
-    uses: radiorabe/actions/.github/workflows/schedule-trivy.yaml@c7aef9928f610ec51b44f84debf2321189276d54 # v0.41.3
+    uses: radiorabe/actions/.github/workflows/schedule-trivy.yaml@479996126a091287dc3fd349786f6f8a6dd1b23c # v0.42.0
     with:
       image-ref: 'ghcr.io/radiorabe/python-minimal:latest'

.github/workflows/semantic-release.yaml

@@ -8,6 +8,6 @@ on:
 
 jobs:
   semantic-release:
-    uses: radiorabe/actions/.github/workflows/semantic-release.yaml@c7aef9928f610ec51b44f84debf2321189276d54 # v0.41.3
+    uses: radiorabe/actions/.github/workflows/semantic-release.yaml@479996126a091287dc3fd349786f6f8a6dd1b23c # v0.42.0
     secrets:
       RABE_ITREAKTION_GITHUB_TOKEN: ${{ secrets.RABE_ITREAKTION_GITHUB_TOKEN }}