chore(deps): bump the actions-minor-and-patch group across 1 directory with 7 updates

.github/workflows/ci-image.yml

@@ -173,7 +173,7 @@ jobs:
       - name: Upload sanitized mock diagnostics
         if: always() && steps.mock_diagnostics.outputs.safe == 'true'
         timeout-minutes: 3
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: e2e-diagnostics-mock-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ runner.temp }}/n2api-diagnostics/mock-smoke/safe
@@ -304,7 +304,7 @@ jobs:
       - name: Upload sanitized gateway E2E diagnostics
         if: always() && steps.gateway_diagnostics.outputs.safe == 'true'
         timeout-minutes: 3
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: e2e-diagnostics-gateway-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ runner.temp }}/n2api-diagnostics/gateway/safe
@@ -400,7 +400,7 @@ jobs:
       - name: Upload sanitized SDK contract diagnostics
         if: always() && steps.sdk_diagnostics.outputs.safe == 'true'
         timeout-minutes: 3
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: e2e-diagnostics-sdk-${{ github.run_id }}-${{ github.run_attempt }}
           path: ${{ runner.temp }}/n2api-diagnostics/sdk-contracts/safe
@@ -477,10 +477,10 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4
+        uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
 
       - name: Set image coordinates
         shell: bash
@@ -512,7 +512,7 @@ jobs:
         run: make disk-check-heavy
 
       - name: Build platform image once
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
         with:
           context: .
           file: deploy/Dockerfile
@@ -685,7 +685,7 @@ jobs:
 
       - name: Upload tested platform image
         if: github.event_name == 'push' && github.ref == 'refs/heads/main'
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: tested-image-${{ matrix.suffix }}
           path: ${{ runner.temp }}/n2api-tested-image-${{ matrix.suffix }}
@@ -721,7 +721,7 @@ jobs:
       packages: write
     steps:
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
 
       - name: Set image coordinates
         shell: bash
@@ -805,7 +805,7 @@ jobs:
           printf '%s\n' "$platform_digest" > "$RUNNER_TEMP/n2api-digests/${{ matrix.suffix }}"
 
       - name: Upload platform digest
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: image-digest-${{ matrix.suffix }}
           path: ${{ runner.temp }}/n2api-digests/${{ matrix.suffix }}
@@ -830,7 +830,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
 
       - name: Set image coordinates
         shell: bash
@@ -998,7 +998,7 @@ jobs:
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Generate platform SPDX SBOM
-        uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2
+        uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.24.3
         env:
           SYFT_PLATFORM: ${{ matrix.platform }}
         with:
@@ -1102,7 +1102,7 @@ jobs:
           } >> "$GITHUB_STEP_SUMMARY"
 
       - name: Upload platform image evidence
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: image-evidence-${{ matrix.suffix }}
           path: |

.github/workflows/release.yml

@@ -56,7 +56,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
@@ -193,7 +193,7 @@ jobs:
 
       - name: Generate release notes for a new tag
         if: steps.prepare.outputs.resume == 'false'
-        uses: orhun/git-cliff-action@3d96a18cc4ec17e9dc69ddcc424ccafaf1f78ce2 # v4
+        uses: orhun/git-cliff-action@a9a95522b26fe6403f7bb24031f21fb573d0f5ff # v4
         with:
           config: cliff.toml
           args: --unreleased --tag ${{ steps.prepare.outputs.version }} --strip header
@@ -203,7 +203,7 @@ jobs:
 
       - name: Restore release notes for an existing tag
         if: steps.prepare.outputs.resume == 'true'
-        uses: orhun/git-cliff-action@3d96a18cc4ec17e9dc69ddcc424ccafaf1f78ce2 # v4
+        uses: orhun/git-cliff-action@a9a95522b26fe6403f7bb24031f21fb573d0f5ff # v4
         with:
           config: cliff.toml
           args: --current --strip header
@@ -279,7 +279,7 @@ jobs:
           } >> "$GITHUB_STEP_SUMMARY"
 
       - name: Upload release preview
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-preview-${{ steps.prepare.outputs.version }}
           path: release-body.md
@@ -309,7 +309,7 @@ jobs:
           name: release-preview-${{ needs.prepare.outputs.version }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4

.github/workflows/security.yml

@@ -113,7 +113,7 @@ jobs:
         run: dev/ci/render-codeql-config.sh security/exceptions.json .github/codeql/n2api-security.yml
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}

.github/workflows/stable-image-security.yml

@@ -22,7 +22,7 @@ jobs:
       version: ${{ steps.resolve.outputs.version }}
     steps:
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4
+        uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
@@ -140,7 +140,7 @@ jobs:
           } >> "$GITHUB_ENV"
 
       - name: Generate platform SPDX SBOM
-        uses: anchore/sbom-action@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2
+        uses: anchore/sbom-action@66cbf4bc1f1c0d2edc94016e65bc221b6bb0ad6c # v0.24.3
         env:
           SYFT_PLATFORM: ${{ matrix.platform }}
         with:
@@ -240,7 +240,7 @@ jobs:
           } >> "$GITHUB_STEP_SUMMARY"
 
       - name: Upload stable image evidence
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7
         with:
           name: stable-image-evidence-${{ needs.resolve.outputs.version }}-${{ matrix.suffix }}
           path: |