fix: bump OSV-Scanner from v1.7.1 to v1.9.2

[BillyOutlast]

Updates both scan-scheduled and scan-pr reusable workflows. Stays within v1.x line to avoid v1→v2 workflow path breakage. SHA pinned to v1.9.2 tag (764c9181).

Verification

• actionlint clean
• pnpm --filter drop test — 122 passed, 1 skipped

Summary by CodeRabbit

• Chores
  • Updated automated vulnerability scanning workflows to use a newer OSV-Scanner release.
  • Preserved existing scan schedules, triggers, and configuration.

[coderabbitai]

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)

Validation error: Unrecognized key: "auto_review"

⚙️ Configuration instructions

• Please see the configuration documentation for more information.
• You can also validate your configuration using the online YAML validator.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 67d2e301-7498-4ab0-bab7-8d9000c9ff86

📥 Commits

Reviewing files that changed from the base of the PR and between 75eaf7a and 5a7c547.

📒 Files selected for processing (1)

• .github/workflows/osv-scanner.yml

---

📝 Walkthrough

Walkthrough

The workflow updates both OSV Scanner action references from v1.7.1 to v1.9.2 while preserving job conditions and scanner arguments.

Changes

OSV Scanner workflow update

Layer / File(s)	Summary
Update scanner action revisions .github/workflows/osv-scanner.yml	Scheduled/push and pull-request/merge-group jobs now reference the newer pinned OSV Scanner workflow revision.

Estimated code review effort: 1 (Trivial) | ~2 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change: upgrading OSV-Scanner from v1.7.1 to v1.9.2.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ci/osv-scanner-upgrade

---

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud