Bump the gha-dependencies group across 1 directory with 7 updates

.github/workflows/docker-build.yml

@@ -54,15 +54,15 @@ jobs:
 
       - name: Log in to Container Registry
         if: ${{ inputs.push }}
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
@@ -71,10 +71,10 @@ jobs:
             type=raw,value=latest,enable=${{ inputs.venue == 'ops' }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: Dockerfile

.github/workflows/integration-tests.yml

@@ -52,7 +52,7 @@ jobs:
           uv run pytest --cov=stitchee --cov-report=xml tests/integration
 
       - name: Upload coverage
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           verbose: true

.github/workflows/pr-checks.yml

@@ -49,7 +49,7 @@ jobs:
 
       - name: Upload Snyk results to GitHub
         if: always()
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: snyk.sarif
         continue-on-error: true

.github/workflows/unit-tests.yml

@@ -41,7 +41,7 @@ jobs:
         run: uv run pytest --cov=stitchee --cov-report=xml tests/unit
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           verbose: true

.github/workflows/version-and-build.yml

@@ -150,7 +150,7 @@ jobs:
         run: uv build
 
       - name: Upload Python artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: python-artifact
           path: dist/*