chore(deps): bump the actions-deps group with 12 updates

.github/workflows/docker-build-and-push.yml

@@ -57,15 +57,15 @@ jobs:
     name: Docker build and push
     runs-on: ${{ inputs.runs-on }}
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
         # v3.2.0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db
-        # v3.6.1
+        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349
+        # v3.7.1
       - name: Log in to the Container registry
         uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567
         # v3.3.0
@@ -99,15 +99,15 @@ jobs:
           cache-to: type=gha,mode=max
 
       - name: Grab cache DB
-        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
-        # v4.0.2
+        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a
+        # v4.1.2
         with:
           path: matcher.db
           key: matcher.db
 
       - name: Run Clair V4
-        uses: quay/clair-action@b310efd66966de57ad3ce38419f9dde3d63b4dc2
-        # v0.0.9
+        uses: quay/clair-action@171b9f2b3391e4bf9e26cabac0e12b7f0705b988
+        # v0.0.10
         with:
           image-ref: ${{ inputs.registry }}/${{ inputs.image }}
           db-file: matcher.db

.github/workflows/gitleaks.yml

@@ -12,13 +12,13 @@ jobs:
     runs-on: ${{ inputs.runs-on }}
     if: (github.actor != 'dependabot[bot]')
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
         with:
           fetch-depth: 0
       - name: gitleaks
-        uses: gitleaks/gitleaks-action@44c470ffc35caa8b1eb3e8012ca53c2f9bea4eb5
-        # v2.3.6
+        uses: gitleaks/gitleaks-action@83373cf2f8c4db6e24b41c1a9b086bb9619e9cd3
+        # v2.3.7
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           GITLEAKS_VERSION: latest

.github/workflows/go-ci.yml

@@ -20,17 +20,17 @@ jobs:
       pull-requests: read
       checks: write
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
         with:
           fetch-depth: 0
-      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
-        # v5.0.2
+      - uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
+        # v5.1.0
         with:
           go-version: "oldstable"
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@aaa42aa0628b4ae2578232a66b541047968fac86
-        # v6.1.0
+        uses: golangci/golangci-lint-action@971e284b6050e8a5849b72094c50ab08da042db8
+        # v6.1.1
         with:
           version: latest
           only-new-issues: true
@@ -44,13 +44,13 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
         with:
           fetch-depth: 0
       - name: Setup Go
-        uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
-        # v5.0.2
+        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
+        # v5.1.0
         with:
           go-version-file: ${{ inputs.working-directory }}/go.mod
           cache-dependency-path: |

.github/workflows/go-security-scan.yml

@@ -21,8 +21,8 @@ jobs:
       GO111MODULE: on
     steps:
       - name: Checkout Source
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
         with:
           fetch-depth: 0
 

.github/workflows/infra-security-scan.yml

@@ -23,13 +23,13 @@ jobs:
         working-directory: ${{ inputs.working-directory }}
     steps:
       - name: Checkout Source
-        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
         with:
           fetch-depth: 0
       - name: Kics Scan
-        uses: Checkmarx/kics-github-action@530ac1f8efe6202b0f12c9a6e952597ae707b755
-        # v2.1.2
+        uses: Checkmarx/kics-github-action@94469746ec2c43de89a42fb9d2a80070f5d25b16
+        # v2.1.3
         with:
           path: .
           output_path: ${{ inputs.working-directory }}/results.sarif
@@ -53,12 +53,12 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
         with:
           fetch-depth: 0
-      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32
-        # v5.0.2
+      - uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed
+        # v5.1.0
         with:
           go-version: "oldstable"
           cache: false
@@ -80,8 +80,8 @@ jobs:
 
       - name: PR comment with file
         if: github.event_name == 'pull_request' && steps.scan-files.outputs.CHECKMAKE_OUTPUT != ''
-        uses: thollander/actions-comment-pull-request@fabd468d3a1a0b97feee5f6b9e499eab0dd903f6
-        # v2.5.0
+        uses: thollander/actions-comment-pull-request@e2c37e53a7d2227b61585343765f73a9ca57eda9
+        # v3.0.0
         with:
           message: |
             <details>

.github/workflows/local-auto-tagger.yml

@@ -15,12 +15,12 @@ jobs:
   auto-tag:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
       - name: Get changed files for each workflow and action
         id: changed-files
-        uses: tj-actions/changed-files@48d8f15b2aaa3d255ca5af3eba4870f807ce6b3c
-        # v45.0.2
+        uses: tj-actions/changed-files@c3a1bb2c992d77180ae65be6ae6c166cf40f857c
+        # v45.0.3
         with:
           files_yaml: |
             docker-build-and-push:

.github/workflows/local-clair-db.yml

@@ -13,19 +13,19 @@ jobs:
         uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf
         # v3.2.0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db
-        # v3.6.1
+        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349
+        # v3.7.1
 
       - name: Run Clair V4 update
-        uses: quay/clair-action@b310efd66966de57ad3ce38419f9dde3d63b4dc2
-        # v0.0.9
+        uses: quay/clair-action@171b9f2b3391e4bf9e26cabac0e12b7f0705b988
+        # v0.0.10
         with:
           db-file: matcher.db
           mode: update
 
       - name: Cache DB
-        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
-        # v4.0.2
+        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a
+        # v4.1.2
         with:
           path: matcher.db
           key: matcher.db

.github/workflows/python-ci.yml

@@ -21,16 +21,16 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
         with:
           fetch-depth: 0
-      - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3
+      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b
         # v5.2.1
         with:
           python-version: ${{ inputs.python-version }}
-      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
-        # v4.0.2
+      - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a
+        # v4.1.2
         with:
           path: ~/.local
           key: poetry-${{ inputs.poetry-version }}
@@ -42,8 +42,8 @@ jobs:
           virtualenvs-in-project: true
           installer-parallel: true
       - id: cache-deps
-        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
-        # v4.0.2
+        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a
+        # v4.1.2
         with:
           path: ${{ inputs.working-directory }}/.venv
           key: python-${{ inputs.python-version }}-poetry-${{ hashFiles('**/poetry.lock') }}

.github/workflows/rust-ci.yml

@@ -33,13 +33,13 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
         with:
           fetch-depth: 0
       - name: Cargo cache
-        uses: swatinem/rust-cache@23bce251a8cd2ffc3c1075eaa2367cf899916d84
-        # v2.7.3
+        uses: swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab
+        # v2.7.5
         with:
           cache-on-failure: true
           workspaces: ${{ inputs.working-directory }}
@@ -52,13 +52,13 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
         with:
           fetch-depth: 0
       - name: Cargo cache
-        uses: swatinem/rust-cache@23bce251a8cd2ffc3c1075eaa2367cf899916d84
-        # v2.7.3
+        uses: swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab
+        # v2.7.5
         with:
           cache-on-failure: true
           workspaces: ${{ inputs.working-directory }}
@@ -75,13 +75,13 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
         with:
           fetch-depth: 0
       - name: Cargo cache
-        uses: swatinem/rust-cache@23bce251a8cd2ffc3c1075eaa2367cf899916d84
-        # v2.7.3
+        uses: swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab
+        # v2.7.5
         with:
           cache-on-failure: true
           cache-all-crates: true
@@ -109,8 +109,8 @@ jobs:
       run:
         working-directory: ${{ inputs.working-directory }}
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938
-        # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+        # v4.2.2
         with:
           fetch-depth: 0
       - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502
@@ -132,8 +132,8 @@ jobs:
           platform: linux
           arch: x86_64
       - name: Cargo cache
-        uses: swatinem/rust-cache@23bce251a8cd2ffc3c1075eaa2367cf899916d84
-        # v2.7.3
+        uses: swatinem/rust-cache@82a92a6e8fbeee089604da2575dc567ae9ddeaab
+        # v2.7.5
         with:
           cache-on-failure: true
           cache-all-crates: true