chore(deps): update github-actions dependencies (#3620)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| elasticsearch | service | digest | `9dac882` -> `767e028` |
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | digest | `f443b60` -> `16140ae` |
| [go](https://redirect.github.com/actions/go-versions) | uses-with |
patch | `1.25.2` -> `1.25.3` |

---

### Release Notes

<details>
<summary>actions/go-versions (go)</summary>

###
[`v1.25.3`](https://redirect.github.com/actions/go-versions/releases/tag/1.25.3-18483679098):
1.25.3

[Compare
Source](https://redirect.github.com/actions/go-versions/compare/1.25.2-18331015608...1.25.3-18483679098)

Go 1.25.3

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "after 5pm on monday" in timezone
Etc/UTC, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/PeerDB-io/peerdb).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xNDMuMSIsInVwZGF0ZWRJblZlciI6IjQxLjE0My4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/cleanup.yml

@@ -14,7 +14,7 @@ jobs:
 
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
-          go-version: '1.25.2'
+          go-version: '1.25.3'
           cache-dependency-path: e2e_cleanup/go.sum
 
       - name: download go modules

.github/workflows/codeql-analysis.yml

@@ -47,12 +47,12 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4
+      uses: github/codeql-action/init@16140ae1a102900babc80a33c44059580f687047 # v4
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4
+      uses: github/codeql-action/analyze@16140ae1a102900babc80a33c44059580f687047 # v4
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/flow.yml

@@ -53,7 +53,7 @@ jobs:
           - 9092:9092
           - 9644:9644
       elasticsearch:
-        image: elasticsearch:9.1.5@sha256:9dac882b67afe5161f8988a7ede0e9890145182af83e4e1d4d10631c2f66656f
+        image: elasticsearch:9.1.5@sha256:767e028f0bc761d4120487bf36613eecf484dbffd4e62240127e56928a5ef49c
         ports:
           - 9200:9200
         env:
@@ -95,7 +95,7 @@ jobs:
 
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
-          go-version: '1.25.2'
+          go-version: '1.25.3'
           cache-dependency-path: flow/go.sum
 
       - name: install lib-geos

.github/workflows/golang-lint.yml

@@ -24,7 +24,7 @@ jobs:
           sudo apt-get install libgeos-dev
       - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
         with:
-          go-version: '1.25.2'
+          go-version: '1.25.3'
           cache: false
       - name: golangci-lint flow
         uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8