Chore: Bump lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml from 0.2.21 to 0.2.28 #387

	---
	# SPDX-License-Identifier: Apache-2.0
	# SPDX-FileCopyrightText: 2025 The Linux Foundation

	name: "Release Drafter"

	on:
	push:
	# branches to consider in the event; optional, defaults to all
	branches:
	- main
	- master

	# pull_request event is required only for autolabeler
	pull_request:
	# Only following types are handled by the action, but one can default to all as well
	types: [opened, reopened, synchronize]
	# pull_request_target event is required for autolabeler to support PRs from forks
	# pull_request_target:
	# types: [opened, reopened, synchronize]

	permissions:
	contents: read

	jobs:
	update_release_draft:
	permissions:
	# write permission is required to create a github release
	contents: write
	# write permission is required for autolabeler
	# otherwise, read permission is required at least
	pull-requests: write
	runs-on: ubuntu-24.04
	steps:
	# Harden the runner used by this workflow
	- uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
	with:
	egress-policy: audit

	# (Optional) GitHub Enterprise requires GHE_HOST variable set
	#- name: Set GHE_HOST
	# run: \|
	# echo "GHE_HOST=${GITHUB_SERVER_URL##https:\/\/}" >> $GITHUB_ENV

	# Drafts your next Release notes as Pull Requests are merged into "master"
	- uses: release-drafter/release-drafter@b1476f6e6eb133afa41ed8589daba6dc69b4d3f5 # v6.1.0
	# (Optional) specify config name to use, relative to .github/. Default: release-drafter.yml
	# with:
	# config-name: my-config.yml
	# disable-autolabeler: true
	env:
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Provide feedback