chore(deps-dev): update zizmor requirement from <1.16,>=1.15.2 to >=1.15.2,<1.23 in the dev group

[dependabot]

Updates the requirements on zizmor to permit the latest version.
Updates zizmor to 1.22.0

Release notes

Sourced from zizmor's releases.

v1.22.0

Changes ⚠️🔗

• The misfeature audit now only shows non-"well known" shell: findings when running with the "auditor" persona (#1532)

Bug Fixes 🐛🔗

• Fixed a bug where inputs containing CRLF line endings were not patched correctly by the unpinned-uses audit (#1536)

Changelog

Sourced from zizmor's changelog.

1.22.0

Changes ⚠️

• The [misfeature] audit now only shows non-"well known" #!yaml shell: findings when running with the "auditor" persona (#1532)

Bug Fixes 🐛

• Fixed a bug where inputs containing CRLF line endings were not patched correctly by the [unpinned-uses] audit (#1536)

1.21.0

New Features 🌈

• New audit: [misfeature] detects usage of GitHub Actions features that are considered "misfeatures." (#1517)

Enhancements 🌱

• zizmor now uses exit code 3 to signal an audit that has failed because no input files were collected. See the [exit code] documentation for details (#1515)

• The [unpinned-uses] audit now supports auto-fixes for many findings (#1525)

Changes ⚠️

• The [obfuscation] audit no longer flags #!yaml shell: cmd. That check has been moved to the new [misfeature] audit. Users may need to update their ignore comments and/or configuration (#1517)

Bug Fixes 🐛

• The [unpinned-uses] audit now flags reusable workflows that are unpinned, in addition to actions (#1509)

  Many thanks to @​johnbillion for implementing this fix!

1.20.0

Enhancements 🌱

• The [excessive-permissions] audit is now aware of the artifact-metadata and models permissions (#1461)

• The [cache-poisoning] audit is now aware of the @​ramsey/composer-install action (#1489)

... (truncated)

Commits

• 94308f6 zizmor 1.22.0 (#1539)
• 951d2c8 Add 'crater' tests (#1538)
• 13c1b65 Handle CRLF in EmplaceComment (#1536)
• 601bbba Bump trophies (#1535)
• de617a2 Drop 'custom shell' finding to auditor persona (#1532)
• 5175a6c zizmor 1.21.0 (#1529)
• b3f84f4 yamlpatch 0.10.0 (#1528)
• 20b24ff yamlpath 0.33.0 (#1527)
• 4815c16 Support auto-fixes for unpinned-uses (#1525)
• e611eae Document hk integration (#1522)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions