This is an automated email from the ASF dual-hosted git repository.

potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git


The following commit(s) were added to refs/heads/main by this push:
     new 40871d0fae2 Bump the github-actions-updates group across 1 directory 
with 9 updates (#70040)
40871d0fae2 is described below

commit 40871d0fae2ea0838bce6ed72ec6f34958412229
Author: Dependabot [bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sat Jul 18 23:51:42 2026 +0200

    Bump the github-actions-updates group across 1 directory with 9 updates 
(#70040)
    
    Bumps the github-actions-updates group with 9 updates in the / directory:
    
    | Package | From | To |
    | --- | --- | --- |
    | [actions/setup-java](https://github.com/actions/setup-java) | `5.4.0` | 
`5.5.0` |
    | [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | 
`7.0.0` |
    | 
[slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) 
| `3.0.3` | `3.0.5` |
    | 
[aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials)
 | `6.2.1` | `6.2.2` |
    | [github/codeql-action/init](https://github.com/github/codeql-action) | 
`4.36.2` | `4.37.0` |
    | [github/codeql-action/autobuild](https://github.com/github/codeql-action) 
| `4.36.2` | `4.37.0` |
    | [github/codeql-action/analyze](https://github.com/github/codeql-action) | 
`4.36.2` | `4.37.0` |
    | [actions/stale](https://github.com/actions/stale) | `10.3.0` | `10.4.0` |
    | [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.2.0` | 
`8.3.2` |
    
    
    
    Updates `actions/setup-java` from 5.4.0 to 5.5.0
    - [Release notes](https://github.com/actions/setup-java/releases)
    - 
[Commits](https://github.com/actions/setup-java/compare/1bcf9fb12cf4aa7d266a90ae39939e61372fe520...0f481fcb613427c0f801b606911222b5b6f3083a)
    
    Updates `actions/setup-node` from 6.4.0 to 7.0.0
    - [Release notes](https://github.com/actions/setup-node/releases)
    - 
[Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020)
    
    Updates `slackapi/slack-github-action` from 3.0.3 to 3.0.5
    - [Release notes](https://github.com/slackapi/slack-github-action/releases)
    - 
[Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md)
    - 
[Commits](https://github.com/slackapi/slack-github-action/compare/45a88b9581bfab2566dc881e2cd66d334e621e2c...0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc)
    
    Updates `aws-actions/configure-aws-credentials` from 6.2.1 to 6.2.2
    - [Release 
notes](https://github.com/aws-actions/configure-aws-credentials/releases)
    - 
[Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
    - 
[Commits](https://github.com/aws-actions/configure-aws-credentials/compare/254c19bd240aabef8777f48595e9d2d7b972184b...517a711dbcd0e402f90c77e7e2f81e849156e31d)
    
    Updates `github/codeql-action/init` from 4.36.2 to 4.37.0
    - [Release notes](https://github.com/github/codeql-action/releases)
    - 
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - 
[Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)
    
    Updates `github/codeql-action/autobuild` from 4.36.2 to 4.37.0
    - [Release notes](https://github.com/github/codeql-action/releases)
    - 
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - 
[Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)
    
    Updates `github/codeql-action/analyze` from 4.36.2 to 4.37.0
    - [Release notes](https://github.com/github/codeql-action/releases)
    - 
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
    - 
[Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)
    
    Updates `actions/stale` from 10.3.0 to 10.4.0
    - [Release notes](https://github.com/actions/stale/releases)
    - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
    - 
[Commits](https://github.com/actions/stale/compare/eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899...1e223db275d687790206a7acac4d1a11bd6fe629)
    
    Updates `astral-sh/setup-uv` from 8.2.0 to 8.3.2
    - [Release notes](https://github.com/astral-sh/setup-uv/releases)
    - 
[Commits](https://github.com/astral-sh/setup-uv/compare/fac544c07dec837d0ccb6301d7b5580bf5edae39...11f9893b081a58869d3b5fccaea48c9e9e46f990)
    
    ---
    updated-dependencies:
    - dependency-name: actions/setup-java
      dependency-version: 5.5.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: github-actions-updates
    - dependency-name: actions/setup-node
      dependency-version: 7.0.0
      dependency-type: direct:production
      update-type: version-update:semver-major
      dependency-group: github-actions-updates
    - dependency-name: slackapi/slack-github-action
      dependency-version: 3.0.5
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: github-actions-updates
    - dependency-name: aws-actions/configure-aws-credentials
      dependency-version: 6.2.2
      dependency-type: direct:production
      update-type: version-update:semver-patch
      dependency-group: github-actions-updates
    - dependency-name: github/codeql-action/init
      dependency-version: 4.37.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: github-actions-updates
    - dependency-name: github/codeql-action/autobuild
      dependency-version: 4.37.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: github-actions-updates
    - dependency-name: github/codeql-action/analyze
      dependency-version: 4.37.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: github-actions-updates
    - dependency-name: actions/stale
      dependency-version: 10.4.0
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: github-actions-updates
    - dependency-name: astral-sh/setup-uv
      dependency-version: 8.3.2
      dependency-type: direct:production
      update-type: version-update:semver-minor
      dependency-group: github-actions-updates
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/airflow-e2e-tests.yml                 | 2 +-
 .github/workflows/basic-tests.yml                       | 4 ++--
 .github/workflows/ci-amd.yml                            | 8 ++++----
 .github/workflows/ci-arm.yml                            | 8 ++++----
 .github/workflows/ci-duration-monitor.yml               | 2 +-
 .github/workflows/ci-image-checks.yml                   | 8 ++++----
 .github/workflows/ci-notification.yml                   | 6 +++---
 .github/workflows/codeql-analysis.yml                   | 8 ++++----
 .github/workflows/e2e-flaky-tests-report.yml            | 2 +-
 .github/workflows/generate-constraints.yml              | 2 +-
 .github/workflows/java-sdk-release-verify.yml           | 4 ++--
 .github/workflows/k8s-tests.yml                         | 2 +-
 .github/workflows/publish-docs-to-s3.yml                | 2 +-
 .github/workflows/recheck-old-bug-report.yml            | 2 +-
 .github/workflows/registry-backfill.yml                 | 6 +++---
 .github/workflows/registry-build.yml                    | 4 ++--
 .github/workflows/registry-tests.yml                    | 2 +-
 .github/workflows/scheduled-verify-release-calendar.yml | 2 +-
 .github/workflows/stale.yml                             | 4 ++--
 .github/workflows/ui-e2e-tests.yml                      | 2 +-
 .github/workflows/update-constraints-on-push-stable.yml | 2 +-
 .github/workflows/update-constraints-on-push.yml        | 2 +-
 .github/workflows/upgrade-check.yml                     | 4 ++--
 23 files changed, 44 insertions(+), 44 deletions(-)

diff --git a/.github/workflows/airflow-e2e-tests.yml 
b/.github/workflows/airflow-e2e-tests.yml
index a13a5cccf2d..3799802a5db 100644
--- a/.github/workflows/airflow-e2e-tests.yml
+++ b/.github/workflows/airflow-e2e-tests.yml
@@ -133,7 +133,7 @@ jobs:
       # example pins a Java 11 toolchain) and this job runs on amd64 and arm64.
       - name: "Setup Java for the Java SDK build"
         if: inputs.e2e_test_mode == 'java_sdk'
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520  # 
v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a  # 
v5.5.0
         with:
           distribution: 'temurin'
           java-version: ${{ inputs.java-sdk-version }}
diff --git a/.github/workflows/basic-tests.yml 
b/.github/workflows/basic-tests.yml
index 0912b0722ec..065868d6cc2 100644
--- a/.github/workflows/basic-tests.yml
+++ b/.github/workflows/basic-tests.yml
@@ -115,7 +115,7 @@ jobs:
       - name: "Install SVN"
         run: sudo apt-get update && sudo apt-get install -y subversion
       - name: "Install Java (for Apache RAT)"
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520  # 
v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a  # 
v5.5.0
         with:
           distribution: 'temurin'
           java-version: '17'
@@ -197,7 +197,7 @@ jobs:
           version: 9
           run_install: false
       - name: "Setup node"
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # 
v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # 
v7.0.0
         with:
           node-version: 24
           cache: 'pnpm'
diff --git a/.github/workflows/ci-amd.yml b/.github/workflows/ci-amd.yml
index 628da7f0900..cd7d99fae89 100644
--- a/.github/workflows/ci-amd.yml
+++ b/.github/workflows/ci-amd.yml
@@ -1035,7 +1035,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Java
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520  # 
v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a  # 
v5.5.0
         with:
           distribution: 'temurin'
           java-version: ${{ env.JAVA_VERSION }}
@@ -1205,7 +1205,7 @@ jobs:
           overwrite: true
       - name: "Notify Slack (new/changed failures)"
         if: steps.notification.outputs.action == 'notify_new'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
@@ -1221,7 +1221,7 @@ jobs:
           # yamllint enable rule:line-length
       - name: "Notify Slack (still not fixed)"
         if: steps.notification.outputs.action == 'notify_reminder'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
@@ -1237,7 +1237,7 @@ jobs:
           # yamllint enable rule:line-length
       - name: "Notify Slack (all tests passing)"
         if: steps.notification.outputs.action == 'notify_recovery'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/ci-arm.yml b/.github/workflows/ci-arm.yml
index 8c2a6be789c..d1c79602039 100644
--- a/.github/workflows/ci-arm.yml
+++ b/.github/workflows/ci-arm.yml
@@ -1024,7 +1024,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Setup Java
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520  # 
v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a  # 
v5.5.0
         with:
           distribution: 'temurin'
           java-version: ${{ env.JAVA_VERSION }}
@@ -1194,7 +1194,7 @@ jobs:
           overwrite: true
       - name: "Notify Slack (new/changed failures)"
         if: steps.notification.outputs.action == 'notify_new'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
@@ -1210,7 +1210,7 @@ jobs:
           # yamllint enable rule:line-length
       - name: "Notify Slack (still not fixed)"
         if: steps.notification.outputs.action == 'notify_reminder'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
@@ -1226,7 +1226,7 @@ jobs:
           # yamllint enable rule:line-length
       - name: "Notify Slack (all tests passing)"
         if: steps.notification.outputs.action == 'notify_recovery'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/ci-duration-monitor.yml 
b/.github/workflows/ci-duration-monitor.yml
index 08e6b6b2657..f4cc2c38e56 100644
--- a/.github/workflows/ci-duration-monitor.yml
+++ b/.github/workflows/ci-duration-monitor.yml
@@ -67,7 +67,7 @@ jobs:
 
       - name: "Post duration alert to Slack"
         if: steps.analyze.outputs.has-regression == 'true'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/ci-image-checks.yml 
b/.github/workflows/ci-image-checks.yml
index b4226608bbf..83f6dd1f1b0 100644
--- a/.github/workflows/ci-image-checks.yml
+++ b/.github/workflows/ci-image-checks.yml
@@ -278,7 +278,7 @@ jobs:
           inputs.canary-run == 'true' &&
           matrix.flag == '--docs-only' &&
           steps.inventory-notification.outputs.action == 'notify_new'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
@@ -294,7 +294,7 @@ jobs:
           inputs.canary-run == 'true' &&
           matrix.flag == '--docs-only' &&
           steps.inventory-notification.outputs.action == 'notify_reminder'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
@@ -310,7 +310,7 @@ jobs:
           inputs.canary-run == 'true' &&
           matrix.flag == '--docs-only' &&
           steps.inventory-notification.outputs.action == 'notify_recovery'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
@@ -453,7 +453,7 @@ jobs:
           inputs.canary-run == 'true' &&
           (github.event_name == 'schedule' || github.event_name == 
'workflow_dispatch')
       - name: Configure AWS credentials
-        uses: 
aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b  
# v6.2.1
+        uses: 
aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d  
# v6.2.2
         with:
           aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/ci-notification.yml 
b/.github/workflows/ci-notification.yml
index c896a94a937..768ede8cdba 100644
--- a/.github/workflows/ci-notification.yml
+++ b/.github/workflows/ci-notification.yml
@@ -79,7 +79,7 @@ jobs:
 
       - name: "Send Slack notification (new/changed failures)"
         if: steps.notification.outputs.action == 'notify_new'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
@@ -100,7 +100,7 @@ jobs:
 
       - name: "Send Slack notification (still not fixed)"
         if: steps.notification.outputs.action == 'notify_reminder'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
@@ -121,7 +121,7 @@ jobs:
 
       - name: "Send Slack notification (all passing)"
         if: steps.notification.outputs.action == 'notify_recovery'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/codeql-analysis.yml 
b/.github/workflows/codeql-analysis.yml
index cd681028a47..8794885fd15 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -130,19 +130,19 @@ jobs:
 
       - name: Setup Java
         if: matrix.language == 'java'
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520  # 
v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a  # 
v5.5.0
         with:
           distribution: 'temurin'
           java-version: '11'
 
       - name: Initialize CodeQL
-        uses: 
github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e  # v4.36.2
+        uses: 
github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9  # v4.37.0
         with:
           languages: ${{ matrix.language }}
 
       - name: Autobuild
         if: matrix.language != 'java'
-        uses: 
github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e  # 
v4.36.2
+        uses: 
github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9  # 
v4.37.0
 
       - name: Build Java SDK
         if: matrix.language == 'java'
@@ -150,7 +150,7 @@ jobs:
         run: ./gradlew classes testClasses
 
       - name: Perform CodeQL Analysis
-        uses: 
github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e  # v4.36.2
+        uses: 
github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9  # v4.37.0
         with:
           # Provide more context to the SARIF output (shows up in 
run.automationDetails.id field)
           category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/e2e-flaky-tests-report.yml 
b/.github/workflows/e2e-flaky-tests-report.yml
index b4408985236..34cb70f971e 100644
--- a/.github/workflows/e2e-flaky-tests-report.yml
+++ b/.github/workflows/e2e-flaky-tests-report.yml
@@ -55,7 +55,7 @@ jobs:
 
       - name: "Post report to Slack"
         if: always() && steps.analyze.outcome == 'success'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/generate-constraints.yml 
b/.github/workflows/generate-constraints.yml
index 900cbb4f357..7e521ed76cb 100644
--- a/.github/workflows/generate-constraints.yml
+++ b/.github/workflows/generate-constraints.yml
@@ -158,7 +158,7 @@ jobs:
           fi
       - name: "Post provider downgrade alert to Slack"
         if: always() && steps.downgrade-alert.outputs.notify == 'true'
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           token: ${{ secrets.SLACK_BOT_TOKEN }}
           payload-file-path: ${{ steps.downgrade-alert.outputs.message-file }}
diff --git a/.github/workflows/java-sdk-release-verify.yml 
b/.github/workflows/java-sdk-release-verify.yml
index 9384f8746b1..188e0c3b968 100644
--- a/.github/workflows/java-sdk-release-verify.yml
+++ b/.github/workflows/java-sdk-release-verify.yml
@@ -76,7 +76,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Set up JDK ${{ env.JAVA_VERSION }}
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520  # 
v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a  # 
v5.5.0
         with:
           distribution: temurin
           java-version: ${{ env.JAVA_VERSION }}
@@ -125,7 +125,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Set up JDK ${{ env.JAVA_VERSION }}
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520  # 
v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a  # 
v5.5.0
         with:
           distribution: temurin
           java-version: ${{ env.JAVA_VERSION }}
diff --git a/.github/workflows/k8s-tests.yml b/.github/workflows/k8s-tests.yml
index 54b4d3dc9c4..5aafb0a792a 100644
--- a/.github/workflows/k8s-tests.yml
+++ b/.github/workflows/k8s-tests.yml
@@ -203,7 +203,7 @@ jobs:
           restore-keys: |
             lang-sdk-go-v1-${{ runner.os }}-${{ runner.arch }}-
       - name: "Setup Java for lang-SDK build"
-        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520  # 
v5.4.0
+        uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a  # 
v5.5.0
         with:
           distribution: 'temurin'
           java-version: ${{ inputs.java-sdk-version }}
diff --git a/.github/workflows/publish-docs-to-s3.yml 
b/.github/workflows/publish-docs-to-s3.yml
index 5523743725a..3aee6cbbde5 100644
--- a/.github/workflows/publish-docs-to-s3.yml
+++ b/.github/workflows/publish-docs-to-s3.yml
@@ -565,7 +565,7 @@ jobs:
           sudo /tmp/aws/install --update
           rm -rf /tmp/aws/
       - name: Configure AWS credentials
-        uses: 
aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b  
# v6.2.1
+        uses: 
aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d  
# v6.2.2
         with:
           aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/recheck-old-bug-report.yml 
b/.github/workflows/recheck-old-bug-report.yml
index a322f9b945d..03032d75e11 100644
--- a/.github/workflows/recheck-old-bug-report.yml
+++ b/.github/workflows/recheck-old-bug-report.yml
@@ -28,7 +28,7 @@ jobs:
   recheck-old-bug-report:
     runs-on: ["ubuntu-22.04"]
     steps:
-      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899  # v10.3.0
+      - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629  # v10.4.0
         with:
           only-issue-labels: 'kind:bug'
           stale-issue-label: 'Stale Bug Report'
diff --git a/.github/workflows/registry-backfill.yml 
b/.github/workflows/registry-backfill.yml
index 337b0c4cfba..0d7bfc2d65d 100644
--- a/.github/workflows/registry-backfill.yml
+++ b/.github/workflows/registry-backfill.yml
@@ -163,7 +163,7 @@ jobs:
           rm -rf /tmp/aws/
 
       - name: "Configure AWS credentials"
-        uses: 
aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b  
# v6.2.1
+        uses: 
aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d  
# v6.2.2
         with:
           aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
@@ -223,7 +223,7 @@ jobs:
           version: 10
 
       - name: "Setup Node.js"
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # 
v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # 
v7.0.0
         with:
           node-version: 24
           cache: 'pnpm'
@@ -305,7 +305,7 @@ jobs:
           rm -rf /tmp/aws/
 
       - name: "Configure AWS credentials"
-        uses: 
aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b  
# v6.2.1
+        uses: 
aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d  
# v6.2.2
         with:
           aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/registry-build.yml 
b/.github/workflows/registry-build.yml
index b737bdb0f4f..308ad409201 100644
--- a/.github/workflows/registry-build.yml
+++ b/.github/workflows/registry-build.yml
@@ -139,7 +139,7 @@ jobs:
           rm -rf /tmp/aws/
 
       - name: "Configure AWS credentials"
-        uses: 
aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b  
# v6.2.1
+        uses: 
aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d  
# v6.2.2
         with:
           aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
@@ -237,7 +237,7 @@ jobs:
           version: 10
 
       - name: "Setup Node.js"
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # 
v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # 
v7.0.0
         with:
           node-version: 24
           cache: 'pnpm'
diff --git a/.github/workflows/registry-tests.yml 
b/.github/workflows/registry-tests.yml
index 7a0cb3c518e..5281c271d43 100644
--- a/.github/workflows/registry-tests.yml
+++ b/.github/workflows/registry-tests.yml
@@ -50,7 +50,7 @@ jobs:
           persist-credentials: false
 
       - name: "Install uv"
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39  # 
v8.2.0
+        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990  # 
v8.3.2
         with:
           python-version: "3.12"
 
diff --git a/.github/workflows/scheduled-verify-release-calendar.yml 
b/.github/workflows/scheduled-verify-release-calendar.yml
index 36fd1b938dd..a713c25c247 100644
--- a/.github/workflows/scheduled-verify-release-calendar.yml
+++ b/.github/workflows/scheduled-verify-release-calendar.yml
@@ -50,7 +50,7 @@ jobs:
       # yamllint disable rule:line-length
       - name: "Notify Slack on failure"
         if: failure()
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc
         with:
           method: chat.postMessage
           token: ${{ secrets.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 41d0ea52050..a7b7b83ecb0 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -30,7 +30,7 @@ jobs:
     runs-on: ["ubuntu-22.04"]
     steps:
       # Handle all PRs (45-day stale) and pending-response issues (14-day 
stale)
-      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899  # v10.3.0
+      - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629  # v10.4.0
         with:
           stale-pr-message: >
             This pull request has been automatically marked as stale because 
it has not had
@@ -50,7 +50,7 @@ jobs:
           close-issue-message: >
             This issue has been closed because it has not received response 
from the issue author.
       # Handle PRs with pending-response label (7-day stale, faster response 
expected)
-      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899  # v10.3.0
+      - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629  # v10.4.0
         with:
           only-pr-labels: 'pending-response'
           days-before-pr-stale: 7
diff --git a/.github/workflows/ui-e2e-tests.yml 
b/.github/workflows/ui-e2e-tests.yml
index ee0e417d963..f33ee0fcfc7 100644
--- a/.github/workflows/ui-e2e-tests.yml
+++ b/.github/workflows/ui-e2e-tests.yml
@@ -126,7 +126,7 @@ jobs:
           version: 9
           run_install: false
       - name: "Setup node"
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e  # 
v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020  # 
v7.0.0
         with:
           node-version: 24
       - name: "Compile UI assets (for image build fallback)"
diff --git a/.github/workflows/update-constraints-on-push-stable.yml 
b/.github/workflows/update-constraints-on-push-stable.yml
index 9a86d06b47b..9278a1b8afe 100644
--- a/.github/workflows/update-constraints-on-push-stable.yml
+++ b/.github/workflows/update-constraints-on-push-stable.yml
@@ -166,7 +166,7 @@ jobs:
       SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
     steps:
       - name: "Send Slack notification"
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/update-constraints-on-push.yml 
b/.github/workflows/update-constraints-on-push.yml
index 064cecc20ae..d2ffaa71981 100644
--- a/.github/workflows/update-constraints-on-push.yml
+++ b/.github/workflows/update-constraints-on-push.yml
@@ -235,7 +235,7 @@ jobs:
       SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
     steps:
       - name: "Send Slack notification"
-        uses: 
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c  # v3.0.3
+        uses: 
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc  # v3.0.5
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/upgrade-check.yml 
b/.github/workflows/upgrade-check.yml
index cd3dce4d4e5..ea0f1d57c3a 100644
--- a/.github/workflows/upgrade-check.yml
+++ b/.github/workflows/upgrade-check.yml
@@ -103,7 +103,7 @@ jobs:
           [${{ inputs.target-branch }}] Notify Slack on success
         if: success() && steps.find-pr.outputs.pr-url != ''
         uses: >-
-          slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c
+          slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}
@@ -132,7 +132,7 @@ jobs:
           [${{ inputs.target-branch }}] Notify Slack on failure
         if: failure()
         uses: >-
-          slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c
+          slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc
         with:
           method: chat.postMessage
           token: ${{ env.SLACK_BOT_TOKEN }}

Reply via email to