build(deps): bump the dependencies group across 18 directories with 3 updates

.github/workflows/_bazel.yml

@@ -64,7 +64,7 @@ jobs:
         inputs.action == 'build'
         && inputs.artifacts
         && inputs.upload
-      uses: envoyproxy/toolshed/actions/jq@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/jq@718038ba06daddeee163f264a77aa47b31a66779
       with:
         input: ${{ inputs.artifacts }}
         input-format: text

.github/workflows/_publish_release.yml

@@ -66,7 +66,7 @@ jobs:
     name: release (${{ inputs.name }})
     runs-on: ubuntu-24.04
     steps:
-    - uses: envoyproxy/toolshed/actions/appauth@28425876b3da9328b7b1bd4e8399d599c2460035
+    - uses: envoyproxy/toolshed/actions/appauth@718038ba06daddeee163f264a77aa47b31a66779
       id: appauth
       name: Appauth
       if: >-
@@ -77,7 +77,7 @@ jobs:
         key: ${{ secrets.app-key }}
     - id: checkout
       name: Checkout the repository
-      uses: envoyproxy/toolshed/actions/github/checkout@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/github/checkout@718038ba06daddeee163f264a77aa47b31a66779
       with:
         branch: main
         committer-name: ${{ inputs.committer-name }}
@@ -90,21 +90,21 @@ jobs:
       id: gpg
       if: >-
         inputs.artifacts
-      uses: envoyproxy/toolshed/actions/gpg@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/gpg@718038ba06daddeee163f264a77aa47b31a66779
       with:
         gpg-key: ${{ secrets.gpg-key }}
         gpg-password: ${{ secrets.gpg-password }}
     - name: Release title (eg commit message)
       id: title
-      uses: envoyproxy/toolshed/actions/jq@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/jq@718038ba06daddeee163f264a77aa47b31a66779
       with:
         options: -sRr
         input: |
           ${{ inputs.title }}
         filter: |
           split("\n") | first
     - name: Publish the release
-      uses: envoyproxy/toolshed/actions/github/release@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/github/release@718038ba06daddeee163f264a77aa47b31a66779
       with:
         artifact-workflows: ${{ inputs.artifact-workflows }}
         artifacts: ${{ inputs.artifacts }}

.github/workflows/_release.yml

@@ -80,7 +80,7 @@ jobs:
     name: ${{ inputs.action }}
     runs-on: ubuntu-24.04
     steps:
-    - uses: envoyproxy/toolshed/actions/appauth@28425876b3da9328b7b1bd4e8399d599c2460035
+    - uses: envoyproxy/toolshed/actions/appauth@718038ba06daddeee163f264a77aa47b31a66779
       id: appauth
       name: Appauth
       if: >-
@@ -90,7 +90,7 @@ jobs:
         key: ${{ secrets.app-key }}
     - id: checkout
       name: Checkout the repository
-      uses: envoyproxy/toolshed/actions/github/checkout@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/github/checkout@718038ba06daddeee163f264a77aa47b31a66779
       with:
         branch: main
         committer-name: ${{ inputs.committer-name }}
@@ -99,7 +99,7 @@ jobs:
         token: ${{ steps.appauth.outputs.token }}
     - name: Get version file
       id: version-file
-      uses: envoyproxy/toolshed/actions/jq@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/jq@718038ba06daddeee163f264a77aa47b31a66779
       with:
         input: |
           actions: actions/VERSION.txt
@@ -111,11 +111,11 @@ jobs:
         filter: .["${{ inputs.type }}"]
     - name: Get version info
       id: version
-      uses: envoyproxy/toolshed/actions/version@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/version@718038ba06daddeee163f264a77aa47b31a66779
       with:
         version-file: ${{ steps.version-file.outputs.value }}
     - name: Update version file
-      uses: envoyproxy/toolshed/actions/bson@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/bson@718038ba06daddeee163f264a77aa47b31a66779
       if: >-
         inputs.action != 'prepare'
       with:
@@ -148,23 +148,23 @@ jobs:
 
     # BAZEL ONLY
     - name: Get latest bins release (for bazel)
-      uses: envoyproxy/toolshed/actions/github/release/latest@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/github/release/latest@718038ba06daddeee163f264a77aa47b31a66779
       id: bins-version
       if: >-
         inputs.type == 'bazel'
         && inputs.action != 'release-no-prepare'
       with:
         pattern: ^bins-
     - name: Get SHAs for latest bins release (for bazel)
-      uses: envoyproxy/toolshed/actions/github/release/shas@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/github/release/shas@718038ba06daddeee163f264a77aa47b31a66779
       id: bins-shas
       if: >-
         inputs.type == 'bazel'
         && inputs.action != 'release-no-prepare'
       with:
         tag: ${{ steps.bins-version.outputs.tag }}
     - name: Get current SHAs and version (for bazel)
-      uses: envoyproxy/toolshed/actions/bson@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/bson@718038ba06daddeee163f264a77aa47b31a66779
       id: bins-deps
       if: >-
         inputs.type == 'bazel'
@@ -179,7 +179,7 @@ jobs:
           bash::output
         options: -sRr
     - name: Update bins shas (for bazel)
-      uses: envoyproxy/toolshed/actions/bson@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/bson@718038ba06daddeee163f264a77aa47b31a66779
       id: bins-updates
       if: >-
         inputs.type == 'bazel'
@@ -253,7 +253,7 @@ jobs:
       if: >-
         inputs.type == 'python'
         && inputs.action != 'release-no-prepare'
-      uses: envoyproxy/toolshed/actions/bson@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/bson@718038ba06daddeee163f264a77aa47b31a66779
       with:
         input: |
           ${{ inputs.python-find-versions }}
@@ -270,7 +270,7 @@ jobs:
         inputs.type == 'python'
         && inputs.action != 'release-no-prepare'
       name: Update python release packages
-      uses: envoyproxy/toolshed/actions/bson@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/bson@718038ba06daddeee163f264a77aa47b31a66779
       with:
         input: |
           args: >-
@@ -292,7 +292,7 @@ jobs:
       if: >-
         inputs.type == 'python'
         && inputs.action != 'release-no-prepare'
-      uses: envoyproxy/toolshed/actions/bson@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/bson@718038ba06daddeee163f264a77aa47b31a66779
       with:
         input: |
           ${{ inputs.python-find-versions }}
@@ -338,7 +338,7 @@ jobs:
         echo "message=${COMMIT_MESSAGE}" >> "$GITHUB_OUTPUT"
         echo "changes=true" >> "$GITHUB_OUTPUT"
     - name: Create Pull Request
-      uses: envoyproxy/toolshed/actions/github/pr@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/github/pr@718038ba06daddeee163f264a77aa47b31a66779
       if: fromJSON(steps.commit.outputs.changes)
       with:
         base: main

.github/workflows/actions.yml

@@ -21,7 +21,7 @@ jobs:
       run: ${{ steps.filter.outputs.run }}
       tests: ${{ steps.tests.outputs.output }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@28425876b3da9328b7b1bd4e8399d599c2460035
+    - uses: envoyproxy/toolshed/actions/github/should-run@718038ba06daddeee163f264a77aa47b31a66779
       id: filter
       with:
         config: |
@@ -30,7 +30,7 @@ jobs:
           - 'js/**'
           - '.github/workflows/actions.yml'
     - id: tests
-      uses: envoyproxy/toolshed/actions/bson@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/bson@718038ba06daddeee163f264a77aa47b31a66779
       with:
         input: |
           OUTPUT="$(find actions -path "*/tests/*.test.yml" -type f)"
@@ -53,7 +53,7 @@ jobs:
     steps:
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
     - name: Run test
-      uses: envoyproxy/toolshed/actions/test-runner@28425876b3da9328b7b1bd4e8399d599c2460035
+      uses: envoyproxy/toolshed/actions/test-runner@718038ba06daddeee163f264a77aa47b31a66779
       with:
         config: ${{ matrix.test }}
         name: ${{ matrix.test }}

.github/workflows/bazel.yml

@@ -20,7 +20,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@28425876b3da9328b7b1bd4e8399d599c2460035
+    - uses: envoyproxy/toolshed/actions/github/should-run@718038ba06daddeee163f264a77aa47b31a66779
       id: filter
       with:
         config: |

.github/workflows/docker.yml

@@ -21,7 +21,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@28425876b3da9328b7b1bd4e8399d599c2460035
+    - uses: envoyproxy/toolshed/actions/github/should-run@718038ba06daddeee163f264a77aa47b31a66779
       id: filter
       with:
         config: |
@@ -46,7 +46,7 @@ jobs:
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349  # v3.7.1
+      uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f  # v3.12.0
 
     - name: Get docker SHA
       id: docker-sha
@@ -72,7 +72,7 @@ jobs:
       shell: bash
 
     - name: Upload OCI artifacts
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: oci-debian-${{ matrix.arch }}
         path: docker/build/oci-output/*.tar

.github/workflows/jq.yml

@@ -20,7 +20,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@28425876b3da9328b7b1bd4e8399d599c2460035
+    - uses: envoyproxy/toolshed/actions/github/should-run@718038ba06daddeee163f264a77aa47b31a66779
       id: filter
       with:
         config: |

.github/workflows/js.yml

@@ -20,7 +20,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@28425876b3da9328b7b1bd4e8399d599c2460035
+    - uses: envoyproxy/toolshed/actions/github/should-run@718038ba06daddeee163f264a77aa47b31a66779
       id: filter
       with:
         config: |

.github/workflows/publishing.yml

@@ -19,7 +19,7 @@ jobs:
       run: ${{ steps.filter.outputs.run }}
       sha: ${{ steps.commit.outputs.sha }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@28425876b3da9328b7b1bd4e8399d599c2460035
+    - uses: envoyproxy/toolshed/actions/github/should-run@718038ba06daddeee163f264a77aa47b31a66779
       id: filter
       with:
         config: |

.github/workflows/py.yml

@@ -22,7 +22,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@28425876b3da9328b7b1bd4e8399d599c2460035
+    - uses: envoyproxy/toolshed/actions/github/should-run@718038ba06daddeee163f264a77aa47b31a66779
       id: filter
       with:
         config: |

.github/workflows/releasing.yml

@@ -19,7 +19,7 @@ jobs:
       run: ${{ steps.filter.outputs.run }}
       sha: ${{ steps.commit.outputs.sha }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@28425876b3da9328b7b1bd4e8399d599c2460035
+    - uses: envoyproxy/toolshed/actions/github/should-run@718038ba06daddeee163f264a77aa47b31a66779
       id: filter
       with:
         config: |

.github/workflows/rust.yml

@@ -21,7 +21,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@28425876b3da9328b7b1bd4e8399d599c2460035
+    - uses: envoyproxy/toolshed/actions/github/should-run@718038ba06daddeee163f264a77aa47b31a66779
       id: filter
       with:
         config: |

.github/workflows/sh.yml

@@ -20,7 +20,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@28425876b3da9328b7b1bd4e8399d599c2460035
+    - uses: envoyproxy/toolshed/actions/github/should-run@718038ba06daddeee163f264a77aa47b31a66779
       id: filter
       with:
         config: |

actions/bson/action.yml

@@ -48,7 +48,7 @@ runs:
       chmod +x $TMPFILE
       echo "path=$TMPFILE" >> $GITHUB_OUTPUT
     shell: bash
-  - uses: envoyproxy/toolshed/actions/jq@4dfe60c0747c93995a3d4a7d998bb231e4fadf64
+  - uses: envoyproxy/toolshed/actions/jq@718038ba06daddeee163f264a77aa47b31a66779
     id: command
     with:
       input: ${{ inputs.input }}
@@ -76,7 +76,7 @@ runs:
       TMPFILE: ${{ steps.script.outputs.path }}
     shell: bash
   - id: output
-    uses: envoyproxy/toolshed/actions/jq@4dfe60c0747c93995a3d4a7d998bb231e4fadf64
+    uses: envoyproxy/toolshed/actions/jq@718038ba06daddeee163f264a77aa47b31a66779
     if: ${{ inputs.result-filter }}
     with:
       input: ${{ steps.run.outputs.output }}

actions/cache/prime/action.yml

@@ -70,15 +70,15 @@ runs:
     id: gcs-object
     if: >-
       inputs.cache-type == 'gcs'
-    uses: envoyproxy/toolshed/actions/gcs/cache/exists@4dfe60c0747c93995a3d4a7d998bb231e4fadf64
+    uses: envoyproxy/toolshed/actions/gcs/cache/exists@718038ba06daddeee163f264a77aa47b31a66779
     with:
       bucket: ${{ inputs.gcs-bucket }}
       key: ${{ inputs.key }}
   - name: Check artifact cache
     id: artifact-object
     if: >-
       inputs.cache-type == 'artifact'
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@4dfe60c0747c93995a3d4a7d998bb231e4fadf64
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@718038ba06daddeee163f264a77aa47b31a66779
     with:
       name: ${{ inputs.key }}
       wf-path: ${{ inputs.artifact-wf-path }}
@@ -94,7 +94,7 @@ runs:
       key: ${{ inputs.key }}
 
   # Mutex
-  - uses: envoyproxy/toolshed/actions/jq@4dfe60c0747c93995a3d4a7d998bb231e4fadf64
+  - uses: envoyproxy/toolshed/actions/jq@718038ba06daddeee163f264a77aa47b31a66779
     if: >-
       ! inputs.lock-id
       && steps.cache-restore-initial.outputs.cache-hit != 'true'
@@ -106,7 +106,7 @@ runs:
       options: -Rr
       filter: |
         @base64
-  - uses: envoyproxy/toolshed/actions/github/mutex@4dfe60c0747c93995a3d4a7d998bb231e4fadf64
+  - uses: envoyproxy/toolshed/actions/github/mutex@718038ba06daddeee163f264a77aa47b31a66779
     if: >-
       inputs.lock-token
       && steps.cache-restore-initial.outputs.cache-hit != 'true'
@@ -134,7 +134,7 @@ runs:
     if: >-
       inputs.cache-type == 'artifact'
       && steps.artifact-object.outputs.exists == ''
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@4dfe60c0747c93995a3d4a7d998bb231e4fadf64
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/id@718038ba06daddeee163f264a77aa47b31a66779
     with:
       name: ${{ inputs.key }}
       wf-path: ${{ inputs.artifact-wf-path }}
@@ -143,7 +143,7 @@ runs:
     if: >-
       inputs.cache-type == 'gcs'
       && steps.gcs-object.outputs.exists != 'true'
-    uses: envoyproxy/toolshed/actions/gcs/cache/exists@4dfe60c0747c93995a3d4a7d998bb231e4fadf64
+    uses: envoyproxy/toolshed/actions/gcs/cache/exists@718038ba06daddeee163f264a77aa47b31a66779
     with:
       bucket: ${{ inputs.gcs-bucket }}
       key: ${{ inputs.key }}
@@ -210,7 +210,7 @@ runs:
   - if: >-
       steps.restore.outputs.save == 'true'
       && inputs.gcs-bucket
-    uses: envoyproxy/toolshed/actions/gcs/cache/save@4dfe60c0747c93995a3d4a7d998bb231e4fadf64
+    uses: envoyproxy/toolshed/actions/gcs/cache/save@718038ba06daddeee163f264a77aa47b31a66779
     with:
       bucket: ${{ inputs.gcs-bucket }}
       key: ${{ inputs.key }}
@@ -220,7 +220,7 @@ runs:
     if: >-
       steps.restore.outputs.save == 'true'
       && inputs.cache-type == 'artifact'
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/save@4dfe60c0747c93995a3d4a7d998bb231e4fadf64
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/save@718038ba06daddeee163f264a77aa47b31a66779
     with:
       name: ${{ inputs.artifact-name }}
       path: ${{ inputs.path || inputs.path-tmp }}

actions/cache/restore/action.yml

@@ -72,7 +72,7 @@ runs:
     if: >-
       inputs.cache-type == 'gcs'
     id: cache-restore-gcs
-    uses: envoyproxy/toolshed/actions/gcs/cache/restore@4dfe60c0747c93995a3d4a7d998bb231e4fadf64
+    uses: envoyproxy/toolshed/actions/gcs/cache/restore@718038ba06daddeee163f264a77aa47b31a66779
     with:
       bucket: ${{ inputs.gcs-bucket }}
       path: ${{ inputs.path || inputs.path-tmp }}
@@ -81,7 +81,7 @@ runs:
     if: >-
       inputs.cache-type == 'artifact'
     id: cache-restore-artifact
-    uses: envoyproxy/toolshed/actions/github/artifact/cache/restore@4dfe60c0747c93995a3d4a7d998bb231e4fadf64
+    uses: envoyproxy/toolshed/actions/github/artifact/cache/restore@718038ba06daddeee163f264a77aa47b31a66779
     with:
       id: ${{ inputs.artifact-id }}
       name: ${{ inputs.artifact-name }}