Update dependency Sarif.Sdk to v4.5.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
Sarif.Sdk	4.4.0 -> 4.5.4

---

Release Notes

Microsoft/sarif-sdk (Sarif.Sdk)

v4.5.4

• BUG: Fix incorrect base class in rule ADO2012.

v4.5.3

• BUG: Restructure shared MessageResourceNames collections to ensure return of correct error messages.

v4.5.2

• BUG: Update Skimmer stack in Multitool.Library to support shared MessageResourceNames collections between base rules and their derivatives.
• BUG: Fix message strings to always assume {1} is reserved for the rule's service name.
• BUG: Clean up unused resource strings in Multitool.Library.Rules.RuleResources.resx.

v4.5.1

• DEP: Add explicit package references to Sarif and Sarif.Driver to resolve version conflict build error.
  System.Diagnostics.Debug 4.3.0,
  System.IO.FileSystem.Primitives 4.3.0,
  System.Text.Encoding.Extensions 4.3.0.

v4.5.0

• DEP: Downgrade System.Text.Encoding.CodePages from 8.0.0 to 4.3.0 in Sarif.
• DEP: Remove explicit versioning for System.Memory and System.Runtime.CompilerServices.Unsafe.
• DEP: Remove spurious references to System.Collections.Immutable.
• DEP: Update Microsoft.Data.SqlClient reference from 2.1.2 to 2.1.7 in WorkItems and Sarif.Multitool.Library to resolve CVE-2024-0056.
• DEP: Update System.Data.SqlClient reference from 4.8.5 to 4.8.6 in WorkItems to resolve CVE-2024-0056.
• BUG: Improve FileEncoding.IsTextualData method for detecting binary files.
• BUG: Update Stack.Create method to populate missing PhysicalLocation instances when stack frames reference relative file paths.
• BUG: Fix UnsupportedOperationException in ZipArchiveArtifact.
• BUG: Fix MultithreadedAnalyzeCommandBase to return rich return code with the --rich-return-code option.
• NEW: Add IsBinary property to IEnumeratedArtifact and implement the property in ZipArchiveArtifact.
• NEW: Switch to content-based IsBinary categorization for ZipArchiveArtifacts.
• PRF: Change default max-file-size-in-kb parameter to 10 megabytes.
• PRF: Add support for efficiently peeking into non-seekable streams for binary/text categorization.
• NEW: Add a new --timeout-in-seconds parameter to AnalyzeOptionsBase, which will override the TimeoutInMilliseconds property in AnalyzeContextBase.
• NEW: --post-uri will skip sending the SARIF log to the configured endpoint if the file contains no results or fatal execution errors.
• NEW: Add the following rules:
  ADO1011.ReferenceFinalSchema,
  ADO1013.ProvideRequiredSarifLogProperties,
  ADO1014.ProvideRequiredRunProperties,
  ADO1015.ProvideRequiredResultProperties,
  ADO1016.ProvideRequiredLocationProperties,
  ADO1017.ProvideRequiredPhysicalLocationProperties,
  ADO1018.ProvideRequiredToolProperties,
  ADO2012.ProvideRequiredReportingDescriptorProperties,
  GH1011.ReferenceFinalSchema,
  GH1013.ProvideRequiredSarifLogProperties,
  GH1014.ProvideRequiredRunProperties,
  GH1015.ProvideRequiredResultProperties,
  GH1016.ProvideRequiredLocationProperties,
  GH1017.ProvideRequiredPhysicalLocationProperties,
  GH1018.ProvideRequiredToolProperties,
  GH2012.ProvideRequiredReportingDescriptorProperties.
• NEW: Add a new --rule-kind parameter to AnalyzeOptionsBase, which specifies rule kinds to run (Sarif, Ghas, Ado). Example: --rule-kind Ado;Sarif.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.