chore(deps): update github actions updates

Author: renovate[bot]

.github/workflows/ci-cleanup.yaml

@@ -7,7 +7,7 @@ on:
 
 jobs:
   cleanup:
-    uses: cloudoperators/common/.github/workflows/shared-ghcr-cleanup.yaml@f87e1e6b7889707a9c10d1a8a9f9f481eb311c06 # main
+    uses: cloudoperators/common/.github/workflows/shared-ghcr-cleanup.yaml@c7ec5c47aac160939836a5444d17f098b786c234 # main
     with:
       package: greenhouse,greenhouse/charts/greenhouse
       dry-run: true

.github/workflows/ci-e2e-test-nightly.yaml

@@ -39,7 +39,7 @@ jobs:
       - name: "E2E"
         id: e2e
         continue-on-error: true
-        uses: cloudoperators/common/workflows/e2e@f87e1e6b7889707a9c10d1a8a9f9f481eb311c06 # main
+        uses: cloudoperators/common/workflows/e2e@c7ec5c47aac160939836a5444d17f098b786c234 # main
         env:
           RUNTIME_ENV: "CI"
           GH_APP_ID: ${{ secrets.CLOUDOPERATOR_APP_ID }}

.github/workflows/ci-e2e-test.yaml

@@ -47,7 +47,7 @@ jobs:
       - name: "E2E"
         id: e2e
         continue-on-error: true
-        uses: cloudoperators/common/workflows/e2e@f87e1e6b7889707a9c10d1a8a9f9f481eb311c06 # main
+        uses: cloudoperators/common/workflows/e2e@c7ec5c47aac160939836a5444d17f098b786c234 # main
         env:
           RUNTIME_ENV: "CI"
           GH_APP_ID: ${{ secrets.CLOUDOPERATOR_APP_ID }}

.github/workflows/ci-reuse.yaml

@@ -8,4 +8,4 @@ on: [pull_request]
 
 jobs:
   reuse:
-    uses: cloudoperators/common/.github/workflows/shared-reuse.yaml@f87e1e6b7889707a9c10d1a8a9f9f481eb311c06 # main
+    uses: cloudoperators/common/.github/workflows/shared-reuse.yaml@c7ec5c47aac160939836a5444d17f098b786c234 # main

.github/workflows/codeql.yaml

@@ -21,7 +21,7 @@ jobs:
       security-events: write
       actions: read
       contents: read
-    uses: cloudoperators/common/.github/workflows/shared-codeql.yaml@f87e1e6b7889707a9c10d1a8a9f9f481eb311c06 # main
+    uses: cloudoperators/common/.github/workflows/shared-codeql.yaml@c7ec5c47aac160939836a5444d17f098b786c234 # main
     with:
       runs-on: "['ubuntu-latest']"
       language: "['go']"

.github/workflows/docker-build.yaml

@@ -40,13 +40,13 @@ jobs:
 
       # Set up QEMU for cross-platform builds
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
+        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
 
       # Set up BuildKit Docker container builder to be able to build
       # multi-platform images and export cache
       # https://github.com/docker/setup-buildx-action
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
         with:
           driver-opts: |
             image=moby/buildkit:latest
@@ -55,7 +55,7 @@ jobs:
       # https://github.com/docker/login-action
       - name: Log into registry ${{ env.REGISTRY }}
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
@@ -65,7 +65,7 @@ jobs:
       # https://github.com/docker/metadata-action
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
         with:
           images: ${{ env.REGISTRY }}/${{ github.repository_owner }}/greenhouse
           tags: |
@@ -84,7 +84,7 @@ jobs:
       # https://github.com/docker/build-push-action
       - name: Build and push Docker image
         id: build-and-push
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: .
           push: ${{ github.event_name != 'pull_request' }}
@@ -133,7 +133,7 @@ jobs:
           severity: "CRITICAL,HIGH,MEDIUM"
 
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4
+        uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1
         if: always()
         with:
           sarif_file: trivy-results.sarif

.github/workflows/helm-push.yaml

@@ -50,7 +50,7 @@ jobs:
 
       - name: Log into registry ${{ env.REGISTRY }}
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
         with:
             registry: ${{ env.REGISTRY }}
             username: ${{ github.actor }}

.github/workflows/issue-project-sync.yml

@@ -11,6 +11,6 @@ jobs:
     if: github.event.label.name == 'backlog'
     runs-on: ubuntu-latest
     steps:
-      - uses: cloudoperators/common/workflows/issue-project-sync@f87e1e6b7889707a9c10d1a8a9f9f481eb311c06 # main
+      - uses: cloudoperators/common/workflows/issue-project-sync@c7ec5c47aac160939836a5444d17f098b786c234 # main
         with:
           GH_TOKEN: ${{ secrets.GH_PROJECT_TOKEN }}

.github/workflows/issue-triage.yml

@@ -10,4 +10,4 @@ jobs:
   triage:
     runs-on: ubuntu-latest
     steps:
-      - uses: cloudoperators/common/workflows/issue-triage@f87e1e6b7889707a9c10d1a8a9f9f481eb311c06 # main
+      - uses: cloudoperators/common/workflows/issue-triage@c7ec5c47aac160939836a5444d17f098b786c234 # main

.github/workflows/pr-docker-build.yaml

@@ -30,17 +30,17 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
+        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
+        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
         with:
           driver-opts: |
             image=moby/buildkit:latest
 
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
+        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
         with:
           images: ${{ env.REGISTRY }}/${{ github.repository_owner }}/greenhouse
           tags: |
@@ -57,7 +57,7 @@ jobs:
 
       - name: Build Docker image
         id: build-and-push
-        uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
         with:
           context: .
           push: false