[CHORE](gha)(deps): Bump marocchino/sticky-pull-request-comment from 2.9.4 to 3.0.3 (#19)

* [CHORE](gha)(deps): Bump marocchino/sticky-pull-request-comment

Bumps [marocchino/sticky-pull-request-comment](https://github.com/marocchino/sticky-pull-request-comment) from 2.9.4 to 3.0.3.
- [Release notes](https://github.com/marocchino/sticky-pull-request-comment/releases)
- [Commits](marocchino/sticky-pull-request-comment@7737449...0ea0beb)

---
updated-dependencies:
- dependency-name: marocchino/sticky-pull-request-comment
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* Add zizmor ignore comments to GitHub actions

Add inline zizmor ignore annotations to suppress automated checks: update .github/actions/s5cmd/action.yml to ignore stale-action-refs on the action setup line; update .github/workflows/omf_pr_checks.yml and .github/workflows/validate-pr-title.yml to ignore concurrency-limits on workflow names and mark the pull_request_target trigger as ignore[dangerous-triggers]. These comments silence linter/CI warnings about stale action refs, concurrency limits, and dangerous triggers.

Signed-off-by: John McCall <john@overturemaps.org>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: John McCall <john@overturemaps.org>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: John McCall <john@overturemaps.org>

Author: dependabot[bot]

.github/actions/s5cmd/action.yml

@@ -57,7 +57,7 @@ runs:
   using: composite
   steps:
     - name: Install s5cmd v${{ inputs.version }}
-      uses: peak/action-setup-s5cmd@bde462e7399c68b4a9b05549d90b0e7d5c95e60f
+      uses: peak/action-setup-s5cmd@bde462e7399c68b4a9b05549d90b0e7d5c95e60f # zizmor: ignore[stale-action-refs] — upstream has no releases or tags; main
       with:
         version: v${{ inputs.version }}
 

.github/workflows/omf_pr_checks.yml

@@ -7,7 +7,7 @@
 #
 # Designed to run as a GitHub Ruleset required workflow.
 #
-name: OMF PR Checks
+name: OMF PR Checks # zizmor: ignore[concurrency-limits]
 
 on:
   pull_request_target: # zizmor: ignore[dangerous-triggers]

.github/workflows/validate-pr-title.yml

@@ -19,7 +19,7 @@
 #     validate-title:
 #       uses: OvertureMaps/workflows/.github/workflows/validate-pr-title.yml@main
 #
-name: Validate PR Title
+name: Validate PR Title # zizmor: ignore[concurrency-limits]
 
 on:
   workflow_call:
@@ -81,7 +81,7 @@ jobs:
 
       - name: Post validation failure comment
         if: ${{ failure() && steps.lint_pr_title.outputs.error_message }}
-        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # v2.9.4
+        uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
         with:
           header: pr-title-validation-error
           message: |
@@ -99,7 +99,7 @@ jobs:
 
       - name: Delete comment on success
         if: ${{ success() }}
-        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # v2.9.4
+        uses: marocchino/sticky-pull-request-comment@0ea0beb66eb9baf113663a64ec522f60e49231c0 # v3.0.4
         with:
           header: pr-title-validation-error
           delete: true