build(deps): bump step-security/harden-runner

Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 4a1e83c9ef6b0e39b16f17b2734e08cdfbeea46c to 398bb08048482c421b1da00a58a1b472a306eb85.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@4a1e83c...398bb08)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/auto-approve-pr.yaml

@@ -14,7 +14,7 @@ jobs:
     if: github.event.pull_request.user.login == ${{ github.repository_owner }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@4a1e83c9ef6b0e39b16f17b2734e08cdfbeea46c # v2.5.0
+        uses: step-security/harden-runner@398bb08048482c421b1da00a58a1b472a306eb85 # v2.5.0
         with:
           egress-policy: audit
 

.github/workflows/auto-update-pre-commit.yaml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@4a1e83c9ef6b0e39b16f17b2734e08cdfbeea46c # v2.5.0
+        uses: step-security/harden-runner@398bb08048482c421b1da00a58a1b472a306eb85 # v2.5.0
         with:
           egress-policy: audit
 

.github/workflows/codeql.yaml

@@ -41,7 +41,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@4a1e83c9ef6b0e39b16f17b2734e08cdfbeea46c # v2.5.0
+        uses: step-security/harden-runner@398bb08048482c421b1da00a58a1b472a306eb85 # v2.5.0
         with:
           egress-policy: audit
 

.github/workflows/lint.yaml

@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@4a1e83c9ef6b0e39b16f17b2734e08cdfbeea46c # v2.5.0
+        uses: step-security/harden-runner@398bb08048482c421b1da00a58a1b472a306eb85 # v2.5.0
         with:
           egress-policy: audit