Merge branch 'master' into renovate/re-actors-alls-green-digest

Author: MaxymVlasov

.github/workflows/build-image-test.yaml

@@ -66,7 +66,7 @@ jobs:
     - name: Build if Dockerfile changed
       if: steps.changed-files-specific.outputs.any_changed == 'true'
       # yamllint disable-line rule:line-length
-      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d  # v6.12.0
+      uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991  # v6.13.0
       with:
         context: .
         build-args: |
@@ -119,7 +119,7 @@ jobs:
         steps.changed-files-specific.outputs.any_changed == 'true'
         && matrix.os == 'ubuntu-latest'
       # yamllint disable-line rule:line-length
-      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d  # v6.12.0
+      uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991  # v6.13.0
       with:
         context: .
         build-args: |

.github/workflows/build-image.yaml

@@ -53,7 +53,7 @@ jobs:
     - name: Build and Push release
       if: github.event_name != 'schedule'
       # yamllint disable-line rule:line-length
-      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d  # v6.12.0
+      uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991  # v6.13.0
       with:
         context: .
         build-args: |
@@ -71,7 +71,7 @@ jobs:
     - name: Build and Push nightly
       if: github.event_name == 'schedule'
       # yamllint disable-line rule:line-length
-      uses: docker/build-push-action@67a2d409c0a876cbe6b11854e3e25193efe4e62d  # v6.12.0
+      uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991  # v6.13.0
       with:
         context: .
         build-args: |

.github/workflows/reusable-tox.yml

@@ -177,7 +177,7 @@ jobs:
       if: >-
         !contains(fromJSON('["pre-commit", "spellcheck-docs"]'), inputs.toxenv)
       # yamllint disable-line rule:line-length
-      uses: re-actors/checkout-python-sdist@187f55296b0f54d88259aaaf99af32ad3647d3bc  # release/v2
+      uses: re-actors/checkout-python-sdist@187f55296b0f54d88259aaaf99af32ad3647d3bc  # v2.0.0
       with:
         source-tarball-name: ${{ inputs.source-tarball-name }}
         workflow-artifact-name: ${{ inputs.dists-artifact-name }}
@@ -383,7 +383,7 @@ jobs:
         !cancelled()
         && steps.tox-run.outputs.cov-report-files != ''
       # yamllint disable-line rule:line-length
-      uses: codecov/codecov-action@1e68e06f1dbfde0e4cefc87efeba9e4643565303  # v5.1.2
+      uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3  # v5.3.1
       with:
         disable_search: true
         fail_ci_if_error: >-

.github/workflows/scorecards.yml

@@ -45,7 +45,7 @@ jobs:
 
     - name: Run analysis
       # yamllint disable-line rule:line-length
-      uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534  # v2.3.3
+      uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46  # v2.4.0
       with:
         results_file: results.sarif
         results_format: sarif
@@ -79,6 +79,6 @@ jobs:
     # Upload the results to GitHub's code scanning dashboard.
     - name: Upload to code-scanning
       # yamllint disable-line rule:line-length
-      uses: github/codeql-action/upload-sarif@ee117c905ab18f32fa0f66c2fe40ecc8013f3e04  # v3.28.4
+      uses: github/codeql-action/upload-sarif@f6091c0113d1dcf9b98e269ee48e8a7e51b7bdd4  # v3.28.5
       with:
         sarif_file: results.sarif

.pre-commit-config.yaml

@@ -45,7 +45,7 @@ repos:
 
   # Detect hardcoded secrets
 - repo: https://github.com/gitleaks/gitleaks
-  rev: v8.16.3
+  rev: v8.23.2
   hooks:
   - id: gitleaks