Merge pull request #187 from awslabs/dependabot/github_actions/github-actions-20326145ca

ci(deps): bump the github-actions group with 5 updates

Author: fgogolli

.github/workflows/dev-pypi.yml

@@ -148,7 +148,7 @@ jobs:
         retention-days: 180
 
     - name: Upload SBOM to GitHub dependency graph
-      uses: advanced-security/spdx-dependency-submission-action@v0.1.1
+      uses: advanced-security/spdx-dependency-submission-action@v0.2.0
       if: always()
       with:
         filePath: "."

.github/workflows/docs.yml

@@ -101,4 +101,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

.github/workflows/prod-release.yml

@@ -209,7 +209,7 @@ jobs:
 
     - name: Deploy to GitHub Pages
       id: deployment
-      uses: actions/deploy-pages@v4
+      uses: actions/deploy-pages@v5
 
   container-cleanup:
     name: Cleanup Old Container Images

.github/workflows/reusable-test.yml

@@ -97,7 +97,7 @@ jobs:
       - name: Upload coverage to Codecov
         if: inputs.upload-coverage && always()
         continue-on-error: true
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           files: coverage-${{ inputs.test-type }}.xml

.github/workflows/security-code.yml

@@ -92,7 +92,7 @@ jobs:
         fetch-depth: 0
 
     - name: Check for secrets with TruffleHog
-      uses: trufflesecurity/trufflehog@v3.93.8
+      uses: trufflesecurity/trufflehog@v3.94.1
       with:
         path: ./
         base: ${{ github.event_name == 'pull_request' && github.event.pull_request.base.sha || github.event.before }}

.github/workflows/semantic-release.yml

@@ -57,7 +57,7 @@ jobs:
           token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Setup UV
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v7
 
       - name: Install dependencies
         run: uv sync