Bump the minor-and-patches group with 2 updates

Bumps the minor-and-patches group with 2 updates: [oras-project/setup-oras](https://github.com/oras-project/setup-oras) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release).


Updates `oras-project/setup-oras` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/oras-project/setup-oras/releases)
- [Commits](oras-project/setup-oras@8d34698...22ce207)

Updates `softprops/action-gh-release` from 2.3.2 to 2.3.3
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@72f2c25...6cbd405)

---
updated-dependencies:
- dependency-name: oras-project/setup-oras
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patches
- dependency-name: softprops/action-gh-release
  dependency-version: 2.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patches
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

.github/workflows/artifact-hub.yml

@@ -20,7 +20,7 @@ jobs:
     - name: Checkout
       uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8  # v5
 
-    - uses: oras-project/setup-oras@8d34698a59f5ffe24821f0b48ab62a3de8b64b20  # v1
+    - uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6  # v1
 
     - name: ORAS Login
       env:

.github/workflows/releasing.yml

@@ -128,7 +128,7 @@ jobs:
         echo "next-version=$next_version" >> "$GITHUB_OUTPUT"
 
     - name: Release
-      uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8  # v2
+      uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836  # v2
       with:
         draft: true
         body_path: CHANGELOG.latest.md