ci: fix advistories (#11391)