Bump the actions group with 6 updates

.github/workflows/build-ddev.yml

@@ -183,7 +183,7 @@ jobs:
 
     - name: Download Python artifacts
       if: ${{ !startsWith(github.event.ref, 'refs/tags') }}
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         name: python-artifacts
         path: ddev/dist
@@ -354,7 +354,7 @@ jobs:
         OUTER
 
     - name: Download staged standalone binaries
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         pattern: staged-standalone-${{ runner.os }}-*
         path: ddev/archives
@@ -377,7 +377,7 @@ jobs:
       run: rm -rf archives bin targets
 
     - name: Download staged managed binaries
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         pattern: staged-managed-${{ runner.os }}-*
         path: ddev/archives
@@ -515,7 +515,7 @@ jobs:
         OUTER
 
     - name: Download staged standalone binaries
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         pattern: staged-standalone-${{ runner.os }}-*
         path: ddev/archives
@@ -553,7 +553,7 @@ jobs:
       run: rm -rf archives bin notarize-bin
 
     - name: Download staged managed binaries
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         pattern: staged-managed-${{ runner.os }}-*
         path: ddev/archives
@@ -663,20 +663,20 @@ jobs:
         dd_api_key: ${{ secrets.DD_API_KEY }}
 
     - name: Download Python artifacts
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         name: python-artifacts
         path: dist
 
     - name: Download binaries
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         pattern: standalone*
         path: archives
         merge-multiple: true
 
     - name: Download installers
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         pattern: installers-*
         path: installers
@@ -693,7 +693,7 @@ jobs:
         skip-existing: true
 
     - name: Add assets to current release
-      uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
+      uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1
       with:
         files: |-
           archives/*

.github/workflows/codeql-analysis.yml

@@ -32,7 +32,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@babab88e549fbc29e9b0058b5d63e2817a135c17 # v4.33.0
+      uses: github/codeql-action/init@05b1a5d28f8763fd11e77388fe57846f1ba8e766 # v4.33.0
       with:
         languages: ${{ matrix.language }}
         config-file: .github/codeql_config.yml
@@ -42,7 +42,7 @@ jobs:
         # queries: ./path/to/local/query, your-org/your-repo/queries@main
 
     - name: Autobuild
-      uses: github/codeql-action/autobuild@babab88e549fbc29e9b0058b5d63e2817a135c17 # v4.33.0
+      uses: github/codeql-action/autobuild@05b1a5d28f8763fd11e77388fe57846f1ba8e766 # v4.33.0
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@babab88e549fbc29e9b0058b5d63e2817a135c17 # v4.33.0
+      uses: github/codeql-action/analyze@05b1a5d28f8763fd11e77388fe57846f1ba8e766 # v4.33.0

.github/workflows/docs.yml

@@ -76,7 +76,7 @@ jobs:
       contents: write
 
     steps:
-    - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+    - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         name: documentation
         path: site

.github/workflows/labeler-reusable.yml

@@ -20,7 +20,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Create token
-        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
         id: token-generator
         with:
           app-id: ${{ secrets.app-id }}

.github/workflows/master-windows.yml

@@ -86,7 +86,7 @@ jobs:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Download all coverage artifacts
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         pattern: coverage-*
         path: coverage-reports

.github/workflows/master.yml

@@ -83,7 +83,7 @@ jobs:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Download all coverage artifacts
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         pattern: coverage-*
         path: coverage-reports

.github/workflows/pr-all-windows.yml

@@ -59,7 +59,7 @@ jobs:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Download all coverage artifacts
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         pattern: coverage-*
         path: coverage-reports

.github/workflows/pr-all.yml

@@ -62,7 +62,7 @@ jobs:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Download all coverage artifacts
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         pattern: coverage-*
         path: coverage-reports

.github/workflows/pr-quick-check.yml

@@ -66,7 +66,7 @@ jobs:
         ${{ github.event.pull_request.base.repo.private && '--private' || '' }}
         --repo "${{ inputs.repo }}"
 
-    - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
+    - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
       # Make sure to update the list of allowed actions in the repo's settings when you bump the hash.
       id: changes
       with:

.github/workflows/pr-test.yml

@@ -120,7 +120,7 @@ jobs:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Download all coverage artifacts
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         pattern: coverage-*
         path: coverage-reports

.github/workflows/release-dispatch.yml

@@ -82,7 +82,7 @@ jobs:
       - name: Get GitHub token via dd-octo-sts
         if: steps.prepare.outputs.has_packages == 'true' && !inputs.dry-run
         id: octo-sts
-        uses: DataDog/dd-octo-sts-action@08f2144903ced3254a3dafec2592563409ba2aa0 # v1.0.1
+        uses: DataDog/dd-octo-sts-action@acaa02eee7e3bb0839e4272dacb37b8f3b58ba80 # v1.0.3
         with:
           scope: DataDog/agent-integration-wheels-release
           policy: integrations-core.dispatch-wheel-builds

.github/workflows/resolve-build-deps.yaml

@@ -183,7 +183,7 @@ jobs:
       run: pip install -r .builders/deps/host_dependencies.txt
 
     - name: Download dependency constraints
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         name: resolution-constraints
         path: .constraints
@@ -283,7 +283,7 @@ jobs:
       uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
     - name: Download dependency constraints
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         name: resolution-constraints
         path: .constraints
@@ -350,7 +350,7 @@ jobs:
       run: pip install -r .builders/deps/host_dependencies.txt
 
     - name: Download artifacts
-      uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+      uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         path: targets
         pattern: target-*
@@ -372,7 +372,7 @@ jobs:
         rm -rf targets
 
     - name: Create token
-      uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+      uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
       id: token-generator
       with:
         app-id: ${{ vars.DD_AGENT_INTEGRATIONS_BOT_APP_ID }}

.github/workflows/test-results-master.yml

@@ -26,7 +26,7 @@ jobs:
       with:
         ref: "${{ env.BADGES_BRANCH }}"
 
-    - uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+    - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
       with:
         pattern: test-results-*
         path: test-results

.github/workflows/update-agent-changelog.yml

@@ -38,7 +38,7 @@ jobs:
       run: |-
         ddev release agent integrations-changelog --write
     - name: Create token
-      uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+      uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
       id: token-generator
       with:
         app-id: ${{ secrets.DD_AGENT_INTEGRATIONS_BOT_APP_ID }}

.github/workflows/update-build-agent-yaml.yml

@@ -39,7 +39,7 @@ jobs:
 
       - name: Create token
         if: env.needs_update == 'true'
-        uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
+        uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
         id: token-generator
         with:
           app-id: ${{ secrets.DD_AGENT_INTEGRATIONS_BOT_APP_ID }}