Merge branch 'main' into dev/new_grub_rebased

Author: Bodong-Yang

.github/workflows/claude.yml

@@ -32,7 +32,7 @@ jobs:
 
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@26ddc358fe3befff50c5ec2f80304c90c763f6f8 # v1
+        uses: anthropics/claude-code-action@657fb7c9c986158a19624b357bcbc8c6deb83598 # v1
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           additional_permissions: |

.github/workflows/issue-metrics.yml

@@ -29,7 +29,7 @@ jobs:
           echo "last_month=$first_day..$last_day" >> "$GITHUB_ENV"
 
       - name: Run issue-metrics tool
-        uses: github/issue-metrics@7bee6e691468e996f6701b0638a5238b1490014e # v4
+        uses: github/issue-metrics@c9e9838147fd355dace335ba787f01b6641a400a # v4
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           SEARCH_QUERY: 'repo:tier4/ota-client is:pr created:${{ env.last_month }} -reason:"not planned"'

.github/workflows/performance_test.yaml

@@ -43,7 +43,7 @@ jobs:
 
       - name: Post performance report to PR
         if: steps.check_report.outputs.report_exists == 'true' && github.event_name == 'pull_request'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         with:
           script: |
             const fs = require('fs');

.github/workflows/release.yml

@@ -42,7 +42,7 @@ jobs:
       - name: install uv
         uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
         with:
-          version: "0.11.5"
+          version: "0.11.6"
 
       - name: build otaclient package
         env:

.github/workflows/sync_lockfile.yaml

@@ -38,7 +38,7 @@ jobs:
       - name: Install uv
         uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7
         with:
-          version: "0.11.5"
+          version: "0.11.6"
       - name: Setup python
         uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
         with: