chore(ci)(deps): bump google/osv-scanner-action/osv-scanner-action (#3511)

Bumps [google/osv-scanner-action/osv-scanner-action](https://github.com/google/osv-scanner-action) from a82132c0bd6c7261ffcb78e754c46c70ab57ad9a to 9fd1bcce27f67e3bd819a0a7620e332803dc43bc.
- [Release notes](https://github.com/google/osv-scanner-action/releases)
- [Commits](google/osv-scanner-action@a82132c...9fd1bcc)

---
updated-dependencies:
- dependency-name: google/osv-scanner-action/osv-scanner-action
  dependency-version: 9fd1bcce27f67e3bd819a0a7620e332803dc43bc
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/validate-deps.yml

@@ -84,7 +84,7 @@ jobs:
       # accept a specific advisory, add an osv-scanner.toml `[[IgnoredVulns]]`
       # entry rather than lowering the gate.
       - name: Audit dependencies for known vulnerabilities (OSV-Scanner)
-        uses: google/osv-scanner-action/osv-scanner-action@a82132c0bd6c7261ffcb78e754c46c70ab57ad9a # v2.3.8
+        uses: google/osv-scanner-action/osv-scanner-action@9fd1bcce27f67e3bd819a0a7620e332803dc43bc # v2.3.8
         with:
           scan-args: |-
             --lockfile=pnpm-lock.yaml