Update zizmorcore/zizmor-action action to v0.6.4

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
zizmorcore/zizmor-action	action	patch	v0.6.2 → v0.6.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

zizmorcore/zizmor-action (zizmorcore/zizmor-action)

v0.6.4

Compare Source

Sponsorship is appreciated!

zizmor 1.30.1 is now the default version.

Release notes: https://docs.zizmor.sh/release-notes/#​1301

v0.6.3

Compare Source

zizmor 1.30.0 is now the default version.

Release notes: https://docs.zizmor.sh/release-notes/#​1300

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[flyrain]

CI is failing because the updated action SHA is not yet on the ASF GitHub Actions allowlist.

This PR changes zizmorcore/zizmor-action from v0.6.2 (3dc1ecc9bcb9e94e9b2c709687979e1298497054) to v0.6.3 (70fb788f84895a7701f5643d103d587e460b5c99).

The Gradle work itself completed successfully (BUILD SUCCESSFUL). The Gradle Build Checks job failed afterward in Verify all action refs are allowlisted with:

zizmorcore/zizmor-action@70fb788 — NOT ON ALLOWLIST

The ASF allowlist currently contains the v0.6.2 SHA, but not v0.6.3:
https://github.com/apache/infrastructure-actions/blob/main/actions.yml#L1090-L1104

Failing job:
https://github.com/apache/polaris/actions/runs/33342271668/job/99339938288

Required Checks is only failing as the aggregate result of that job; the other CI jobs passed.

To unblock this PR, add the v0.6.3 SHA to apache/infrastructure-actions and rerun CI after the allowlist update is merged. Alternatively, keep v0.6.2 until the new SHA is approved.

[snazy]

@flyrain mind following up with the ASF-Infra repo PR link that fixes this issue?