chore(deps): update all github action dependencies

Signed-off-by: cilium-renovate[bot] <134692979+cilium-renovate[bot]@users.noreply.github.com>

Author: cilium-renovate[bot]

.github/actions/get-runner-ip/action.yml

@@ -26,7 +26,7 @@ runs:
   steps:
     - name: Get runner public IP
       id: get-ip
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const source = `${{ inputs.source }}`.trim();

.github/actions/wait-for-images/action.yaml

@@ -32,7 +32,7 @@ runs:
       uses: ./.github/actions/set-env-variables
     - name: Login to docker registry
       if: ${{ inputs.auth-required == 'true' && inputs.login-host != '' && inputs.login-username != '' && inputs.login-password != '' }}
-      uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
+      uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
       with:
         registry: ${{ inputs.login-host }}
         username: ${{ inputs.login-username }}

.github/workflows/call-backport-label-updater-v1.17.yaml

@@ -17,7 +17,7 @@
         github.event.pull_request.merged == true &&
         contains(github.event.pull_request.body, 'upstream-prs') &&
         contains(join(github.event.pull_request.labels.*.name, ', '), 'backport/')
-      uses: cilium/cilium/.github/workflows/update-label-backport-pr.yaml@v1.17
+      uses: cilium/cilium/.github/workflows/update-label-backport-pr.yaml@450c53145dc0a872ae20dfb05598c94ef55a71e2 # v1.20.0
       with:
         pr-body: ${{ github.event.pull_request.body }}
         branch: ${{ github.base_ref }}

.github/workflows/call-backport-label-updater-v1.18.yaml

@@ -17,7 +17,7 @@
         github.event.pull_request.merged == true &&
         contains(github.event.pull_request.body, 'upstream-prs') &&
         contains(join(github.event.pull_request.labels.*.name, ', '), 'backport/')
-      uses: cilium/cilium/.github/workflows/update-label-backport-pr.yaml@v1.18
+      uses: cilium/cilium/.github/workflows/update-label-backport-pr.yaml@450c53145dc0a872ae20dfb05598c94ef55a71e2 # v1.20.0
       with:
         pr-body: ${{ github.event.pull_request.body }}
         branch: ${{ github.base_ref }}

.github/workflows/call-backport-label-updater-v1.19.yaml

@@ -17,7 +17,7 @@
         github.event.pull_request.merged == true &&
         contains(github.event.pull_request.body, 'upstream-prs') &&
         contains(join(github.event.pull_request.labels.*.name, ', '), 'backport/')
-      uses: cilium/cilium/.github/workflows/update-label-backport-pr.yaml@v1.19
+      uses: cilium/cilium/.github/workflows/update-label-backport-pr.yaml@450c53145dc0a872ae20dfb05598c94ef55a71e2 # v1.20.0
       with:
         pr-body: ${{ github.event.pull_request.body }}
         branch: ${{ github.base_ref }}

.github/workflows/codeql.yaml

@@ -29,13 +29,13 @@ jobs:
         with:
           fetch-depth: 0
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
+        uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
         with:
           languages: ${{ matrix.language }}
       - name: Autobuild
-        uses: github/codeql-action/autobuild@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
+        uses: github/codeql-action/autobuild@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
+        uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
         with:
           category: '/language:${{matrix.language}}'
           output: sarif-results
@@ -130,7 +130,7 @@ jobs:
           retention-days: 7
 
       - name: Upload SARIF to GitHub Security
-        uses: github/codeql-action/upload-sarif@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5
+        uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
         with:
           sarif_file: sarif-results/${{ matrix.language }}.sarif
           category: '/language:${{matrix.language}}'

.github/workflows/conformance-aks.yaml

@@ -167,7 +167,7 @@ jobs:
           cat /tmp/matrix.json
 
       - name: Login to Azure
-        uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 # v3.0.0
+        uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
         with:
           creds: ${{ secrets.AZURE_PR_SP_CREDS }}
 
@@ -328,7 +328,7 @@ jobs:
           echo ipsec=${IPSEC} >> $GITHUB_OUTPUT
 
       - name: Login to Azure
-        uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 # v3.0.0
+        uses: azure/login@f5d393ae46f8fde4be8b75f32e3fc50e654ad0ca # v3.0.1
         with:
           creds: ${{ secrets.AZURE_PR_SP_CREDS }}
 

.github/workflows/conformance-gke.yaml

@@ -106,7 +106,7 @@ env:
   clusterName: ${{ github.event.repository.name }}-${{ github.run_id }}-${{ inputs.UID }}-${{ github.run_attempt }}
   USE_GKE_GCLOUD_AUTH_PLUGIN: True
   # renovate: datasource=docker depName=google/cloud-sdk
-  gcloud_version: 578.0.0
+  gcloud_version: 580.0.0
 
 jobs:
   echo-inputs:

.github/workflows/documentation.yaml

@@ -30,7 +30,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
       - name: Check code changes
-        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
+        uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
         id: docs-tree
         with:
           # For `push` events, compare against the `ref` base branch

.github/workflows/fqdn-perf.yaml

@@ -168,7 +168,7 @@ jobs:
           go-version: 1.26.5
 
       - name: Install Kops
-        uses: cilium/scale-tests-action/install-kops@7e3eae9de9542f1a7616ca797e2d5090e8f9f8ee # main
+        uses: cilium/scale-tests-action/install-kops@529d919e01deb35642ba5c6ecdcbf2e2311cd3de # main
 
       - name: Setup gcloud credentials
         uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0
@@ -200,7 +200,7 @@ jobs:
 
       - name: Deploy cluster
         id: deploy-cluster
-        uses: cilium/scale-tests-action/create-cluster@7e3eae9de9542f1a7616ca797e2d5090e8f9f8ee # main
+        uses: cilium/scale-tests-action/create-cluster@529d919e01deb35642ba5c6ecdcbf2e2311cd3de # main
         timeout-minutes: 30
         with:
           cluster_name: ${{ steps.vars.outputs.cluster_name }}
@@ -241,7 +241,7 @@ jobs:
           gcloud version
 
       - name: Setup firewall rules
-        uses: cilium/scale-tests-action/setup-firewall@7e3eae9de9542f1a7616ca797e2d5090e8f9f8ee # main
+        uses: cilium/scale-tests-action/setup-firewall@529d919e01deb35642ba5c6ecdcbf2e2311cd3de # main
         with:
           cluster_name: ${{ steps.vars.outputs.cluster_name }}
 
@@ -251,7 +251,7 @@ jobs:
           cilium install ${{ steps.vars.outputs.cilium_install_defaults }} --helm-set=imagePullSecrets[0].name=cilium-registry
 
       - name: Wait for cluster to be ready
-        uses: cilium/scale-tests-action/validate-cluster@7e3eae9de9542f1a7616ca797e2d5090e8f9f8ee # main
+        uses: cilium/scale-tests-action/validate-cluster@529d919e01deb35642ba5c6ecdcbf2e2311cd3de # main
         timeout-minutes: 20
         with:
           cluster_name: ${{ steps.vars.outputs.cluster_name }}
@@ -302,14 +302,14 @@ jobs:
 
       - name: Cleanup cluster
         if: ${{ always() && steps.deploy-cluster.outcome != 'skipped' }}
-        uses: cilium/scale-tests-action/cleanup-cluster@7e3eae9de9542f1a7616ca797e2d5090e8f9f8ee # main
+        uses: cilium/scale-tests-action/cleanup-cluster@529d919e01deb35642ba5c6ecdcbf2e2311cd3de # main
         with:
           cluster_name: ${{ steps.vars.outputs.cluster_name }}
           kops_state: ${{ secrets.GCP_PERF_KOPS_STATE_STORE }}
 
       - name: Export results and sysdump to GS bucket
         if: ${{ always() && steps.run-cl2.outcome != 'skipped' && steps.run-cl2.outcome != 'cancelled' }}
-        uses: cilium/scale-tests-action/export-results@7e3eae9de9542f1a7616ca797e2d5090e8f9f8ee # main
+        uses: cilium/scale-tests-action/export-results@529d919e01deb35642ba5c6ecdcbf2e2311cd3de # main
         with:
           test_name: ${{ env.test_name }}
           tested_sha: ${{ steps.vars.outputs.SHA }}