deps: update patch-updates (#4580)

renovate[bot] · web-flow · commit 55bc47a07f77 · 2025-10-31T09:51:23.000-04:00
Co-authored-by: renovate[bot] &lt;29139614+renovate[bot]@users.noreply.github.com&gt;
diff --git a/.github/actions/install-tool-versions/action.yaml b/.github/actions/install-tool-versions/action.yaml
@@ -30,7 +30,7 @@ runs:
 
     - name: Restore cache
       id: restore-tools-cache
-      uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+      uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
       with:
         # Using $HOME instead of /home/runner as inside of the container the home directory is might not be /home/runner.
         path: $HOME/.asdf
@@ -68,7 +68,7 @@ runs:
         fi
 
     - name: Save cache
-      uses: actions/cache/save@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+      uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
       with:
         path: $HOME/.asdf
         key: ${{ runner.os }}-tools-${{ hashFiles('.tool-versions') }}
diff --git a/.github/workflows/chart-chores.yaml b/.github/workflows/chart-chores.yaml
@@ -74,7 +74,7 @@ jobs:
       - name: Add Helm repos
         run: |
           make helm.repos-add
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: |
             ~/.cache/go-build
diff --git a/.github/workflows/chart-release-chores.yaml b/.github/workflows/chart-release-chores.yaml
@@ -52,7 +52,7 @@ jobs:
       - name: Add Helm repos
         run: |
           make helm.repos-add
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: |
             ~/.cache/go-build
diff --git a/.github/workflows/chart-release-template.yaml b/.github/workflows/chart-release-template.yaml
@@ -152,7 +152,7 @@ jobs:
             --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
       - name: Login to GitHub Container Registry
         if: env.PUBLISH_ARTIFACT == 'true'
-        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
diff --git a/.github/workflows/chart-release.yaml b/.github/workflows/chart-release.yaml
@@ -126,7 +126,7 @@ jobs:
       - name: Install Cosign
         uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
       - name: Setup caching
-        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: |
             ~/.cache/go-build
diff --git a/.github/workflows/chart-validate-template.yaml b/.github/workflows/chart-validate-template.yaml
@@ -51,7 +51,7 @@ jobs:
           echo "check-version-increment: false" >> .github/config/chart-testing.yaml
       # Dependencies.
       - name: Cache Helm chart dependencies
-        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: charts/${{ inputs.camunda-helm-dir }}/charts
           key: ${{ runner.os }}-helm-${{ inputs.camunda-helm-dir }}-${{ hashFiles(format('charts/{0}/Chart.lock', inputs.camunda-helm-dir)) || hashFiles(format('charts/{0}/Chart.yaml', inputs.camunda-helm-dir)) || 'nohash' }}
@@ -64,7 +64,7 @@ jobs:
             helm
             yamllint
       - name: Cache Helm client cache
-        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: |
             $HOME/.cache/helm
diff --git a/.github/workflows/renovate-post-upgrade.yaml b/.github/workflows/renovate-post-upgrade.yaml
@@ -52,7 +52,7 @@ jobs:
             helm
             helm-ct
             yq
-      - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: |
             ~/.cache/go-build
diff --git a/.github/workflows/sec-codeql.yaml b/.github/workflows/sec-codeql.yaml
@@ -48,7 +48,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@0337c4c06e7e00d0d6e64396c13b9dc18dd6d8c5
+      uses: github/codeql-action/init@9bd86385763ccc9345d5b7648ea1b54401b24819
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -62,7 +62,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@0337c4c06e7e00d0d6e64396c13b9dc18dd6d8c5
+      uses: github/codeql-action/autobuild@9bd86385763ccc9345d5b7648ea1b54401b24819
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -75,6 +75,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@0337c4c06e7e00d0d6e64396c13b9dc18dd6d8c5
+      uses: github/codeql-action/analyze@9bd86385763ccc9345d5b7648ea1b54401b24819
       with:
         category: "/language:${{ matrix.language }}"
diff --git a/.github/workflows/sec-scorecard.yaml b/.github/workflows/sec-scorecard.yaml
@@ -63,6 +63,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
+        uses: github/codeql-action/upload-sarif@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/test-integration-runner.yaml b/.github/workflows/test-integration-runner.yaml
@@ -987,7 +987,7 @@ jobs:
       
       - name: Cache - node_modules
         id: cache-node
-        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: ${{ env.ABSOLUTE_TEST_CHART_DIR }}/test/integration/testsuites/node_modules
           key: node_modules-${{ runner.os }}-${{ hashFiles(format('{0}/test/integration/testsuites/package-lock.json', env.ABSOLUTE_TEST_CHART_DIR)) }}
@@ -996,7 +996,7 @@ jobs:
   
       - name: Cache - Playwright
         id: cache-playwright
-        uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
         with:
           path: ~/.cache/ms-playwright
           key: playwright-automation-${{ runner.os }}-${{ hashFiles(format('{0}/test/integration/testsuites/package-lock.json', env.ABSOLUTE_TEST_CHART_DIR)) }}
diff --git a/.github/workflows/test-unit-template.yaml b/.github/workflows/test-unit-template.yaml
@@ -68,7 +68,7 @@ jobs:
         tools: |
           golang
           helm
-    - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
+    - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
       with:
         path: |
           ~/.cache/go-build
diff --git a/.tool-versions b/.tool-versions
@@ -1,5 +1,5 @@
 git-cliff 2.5.0
-golang 1.25.0
+golang 1.25.3
 gomplate v4.3.3
 helm 3.19.0
 helm-cr 1.7.0
diff --git a/charts/camunda-platform-8.2/go.mod b/charts/camunda-platform-8.2/go.mod
@@ -2,7 +2,7 @@ module camunda-platform
 
 go 1.24.0
 
-toolchain go1.25.0
+toolchain go1.25.3
 
 require (
 	github.com/gruntwork-io/terratest v0.51.0
diff --git a/charts/camunda-platform-8.3/go.mod b/charts/camunda-platform-8.3/go.mod
@@ -2,7 +2,7 @@ module camunda-platform
 
 go 1.24.0
 
-toolchain go1.25.0
+toolchain go1.25.3
 
 require (
 	github.com/gruntwork-io/terratest v0.51.0
diff --git a/charts/camunda-platform-8.4/go.mod b/charts/camunda-platform-8.4/go.mod
@@ -2,7 +2,7 @@ module camunda-platform
 
 go 1.24.0
 
-toolchain go1.25.0
+toolchain go1.25.3
 
 require (
 	github.com/gruntwork-io/terratest v0.51.0
diff --git a/charts/camunda-platform-8.5/go.mod b/charts/camunda-platform-8.5/go.mod
@@ -2,7 +2,7 @@ module camunda-platform
 
 go 1.24.0
 
-toolchain go1.25.0
+toolchain go1.25.3
 
 require (
 	github.com/BurntSushi/toml v1.5.0
diff --git a/charts/camunda-platform-8.6/go.mod b/charts/camunda-platform-8.6/go.mod
@@ -2,7 +2,7 @@ module camunda-platform
 
 go 1.24.0
 
-toolchain go1.25.0
+toolchain go1.25.3
 
 require (
 	github.com/BurntSushi/toml v1.5.0
diff --git a/charts/camunda-platform-8.7/go.mod b/charts/camunda-platform-8.7/go.mod
@@ -2,7 +2,7 @@ module camunda-platform
 
 go 1.24.0
 
-toolchain go1.25.0
+toolchain go1.25.3
 
 require (
 	github.com/BurntSushi/toml v1.5.0
diff --git a/scripts/helm_unused_values/go.mod b/scripts/helm_unused_values/go.mod
@@ -2,7 +2,7 @@ module camunda.com/helmunusedvalues
 
 go 1.22
 
-toolchain go1.25.0
+toolchain go1.25.3
 
 require (
 	github.com/fatih/color v1.18.0
