chore(ci)(deps): Bump google/osv-scanner-action/osv-scanner-action (#9209)

Bumps [google/osv-scanner-action/osv-scanner-action](https://github.com/google/osv-scanner-action) from 9fd1bcce27f67e3bd819a0a7620e332803dc43bc to f4cfcc01edc9c8b756a9b873b7a623ca674da51e.
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@9fd1bcc...f4cfcc0)

---
updated-dependencies:
- dependency-name: google/osv-scanner-action/osv-scanner-action
  dependency-version: f4cfcc01edc9c8b756a9b873b7a623ca674da51e
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/validate-deps.yml

@@ -113,7 +113,7 @@ jobs:
           node scripts/check-osv-exemptions.mjs
 
       - name: Audit dependencies for known vulnerabilities (OSV-Scanner)
-        uses: google/osv-scanner-action/osv-scanner-action@9fd1bcce27f67e3bd819a0a7620e332803dc43bc # v2.3.8
+        uses: google/osv-scanner-action/osv-scanner-action@f4cfcc01edc9c8b756a9b873b7a623ca674da51e # v2.3.8
         with:
           scan-args: |-
             --lockfile=pnpm-lock.yaml