Bumps the github-actions group with 3 updates: [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel), [actions/download-artifact](https://github.com/actions/download-artifact) and [actions/setup-python](https://github.com/actions/setup-python).


Updates `pypa/cibuildwheel` from 2.23.2 to 2.23.3
- [Release notes](https://github.com/pypa/cibuildwheel/releases)
- [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md)
- [Commits](pypa/cibuildwheel@d04cacb...faf86a6)

Updates `actions/download-artifact` from 4.2.1 to 4.3.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@95815c3...d3f86a1)

Updates `actions/setup-python` from 5.5.0 to 5.6.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@8d9ed9a...a26af69)

---
updated-dependencies:
- dependency-name: pypa/cibuildwheel
  dependency-version: 2.23.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/setup-python
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* provide more information for unresolved values

When referencing variables that haven't been defined or data sources
that aren't available, instead of just putting in `None` lets return
what value we didn't resolve.

This also leaves strings with unresolved values uninterpolated so we
know exactly what they were trying to do.

* linting

* releng: update dependencies (trivy --> v0.62.1)

* fix: update EvaluateAll return values

Remove references to the second return value to match upstream changes.

* releng: release 0.6.16

Remove deprecated license classifier to avoid build-time issues with
setuptools.

* fix: use instanced logger when setting debug options

This seems to take care of some segfault issues when using `debug =
True` in `load_from_path()` with the latest changes from upstream.

See also: aquasecurity/trivy#8738