chore(ci): fix security audit and codecov GPG verification failures

Signed-off-by: Jonathan Norris <jonathan.norris@dynatrace.com>

Author: jonathannorris

.github/workflows/main.yml

@@ -37,12 +37,12 @@ jobs:
         run: bundle exec rspec
       - name: Upload coverage to Codecov
         if: ${{ strategy.job-index == 0 }} # only run codecov on first run
-        uses: codecov/codecov-action@v6.0.1
+        uses: codecov/codecov-action@8cad3ba95e5920c42f44492e54bc9639cba47959 # v6.0.2
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           fail_ci_if_error: true
           verbose: true
-          file: coverage/coverage.xml
+          files: coverage/coverage.xml
   standard:
     name: Standard
     runs-on: ubuntu-latest

Gemfile.lock

@@ -10,7 +10,7 @@ GEM
     base64 (0.3.0)
     bigdecimal (4.1.1)
     builder (3.3.0)
-    concurrent-ruby (1.3.6)
+    concurrent-ruby (1.3.7)
     csv (3.3.5)
     cucumber (11.0.0)
       base64 (~> 0.2)
@@ -43,7 +43,7 @@ GEM
       reline (>= 0.3.8)
     diff-lcs (1.6.2)
     docile (1.4.1)
-    erb (6.0.2)
+    erb (6.0.4)
     ffi (1.17.4)
     fileutils (1.8.0)
     io-console (0.8.2)