chore(deps): bump the dependencies group with 7 updates

.github/workflows/claude.yml

@@ -32,7 +32,7 @@ jobs:
 
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@v1
+        uses: anthropics/claude-code-action@v1.0.93
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
 

.github/workflows/codeql-analysis.yaml

@@ -22,10 +22,10 @@ jobs:
       uses: actions/checkout@v6
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
+      uses: github/codeql-action/init@v4.35.1
       with:
         languages: 'go, javascript'
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
+      uses: github/codeql-action/analyze@v4.35.1
 

.github/workflows/docker-publish-lakefs-rclone-export.yaml

@@ -42,7 +42,7 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.2
 
       - name: Login to DockerHub
         uses: docker/login-action@v4

.github/workflows/docker-publish.yaml

@@ -68,7 +68,7 @@ jobs:
 
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.2
 
       - name: Login to DockerHub
         uses: docker/login-action@v4

.github/workflows/docs-pr.yaml

@@ -58,7 +58,7 @@ jobs:
         run: aws s3 sync docs/site/ s3://lakefs-docs-pr-previews/prs/oss-pr-${{ github.event.pull_request.number }}/
 
       - name: Comment with preview URL
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const previewUrl = `https://oss-pr-${context.payload.pull_request.number}.docs-lakefs-preview.io/`;

.github/workflows/esti.yaml

@@ -21,7 +21,7 @@ jobs:
       python-sdk-change: ${{ steps.filter.outputs.python-sdk == 'true' }}
     steps:
       - uses: actions/checkout@v6
-      - uses: dorny/paths-filter@v4
+      - uses: dorny/paths-filter@v4.0.1
         id: filter
         with:
           filters: |
@@ -56,7 +56,7 @@ jobs:
         run: echo "tag=sha-$(git rev-parse --short HEAD | sed s/^v//g)" >> $GITHUB_OUTPUT
 
       - name: Restore cache
-        uses: actions/cache@v5
+        uses: actions/cache@v5.0.4
         id: restore-cache
         with:
           path: /tmp/generated.tar.gz
@@ -106,7 +106,7 @@ jobs:
           aws-region: us-east-1
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.2
 
       - name: Checkout
         uses: actions/checkout@v6
@@ -163,7 +163,7 @@ jobs:
           mask-aws-account-id: 'false'
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.2
         with:
           mask-password: 'false'
 
@@ -269,7 +269,7 @@ jobs:
         run: tar -xzvf /tmp/generated.tar.gz
 
       - name: Restore cache
-        uses: actions/cache@v5
+        uses: actions/cache@v5.0.4
         id: restore-cache
         with:
           path: ${{ github.workspace }}/test/spark/metaclient
@@ -352,7 +352,7 @@ jobs:
           aws-region: us-east-1
       - name: Login to Amazon ECR
         id: login-ecr
-        uses: aws-actions/amazon-ecr-login@v2
+        uses: aws-actions/amazon-ecr-login@v2.1.2
 
       - name: Checkout
         uses: actions/checkout@v6
@@ -726,7 +726,7 @@ jobs:
       - name: Check-out code
         uses: actions/checkout@v6
       - name: Restore cache
-        uses: actions/cache@v5
+        uses: actions/cache@v5.0.4
         id: restore-cache
         with:
           path: ${{ github.workspace }}/test/spark/metaclient
@@ -773,7 +773,7 @@ jobs:
       - name: Check-out code
         uses: actions/checkout@v6
       - name: Restore cache
-        uses: actions/cache@v5
+        uses: actions/cache@v5.0.4
         id: restore-cache
         with:
           path: ${{ github.workspace }}/test/spark/metaclient
@@ -1324,7 +1324,7 @@ jobs:
         working-directory: webui
         run: echo "PLAYWRIGHT_VERSION=$(node -e "console.log(require('./package-lock.json').dependencies['@playwright/test'].version)")" >> $GITHUB_ENV
       - name: Cache Playwright binaries
-        uses: actions/cache@v5
+        uses: actions/cache@v5.0.4
         id: playwright-cache
         with:
           path: |
@@ -1400,7 +1400,7 @@ jobs:
         working-directory: webui
         run: echo "PLAYWRIGHT_VERSION=$(node -e "console.log(require('./package-lock.json').dependencies['@playwright/test'].version)")" >> $GITHUB_ENV
       - name: Cache Playwright binaries
-        uses: actions/cache@v5
+        uses: actions/cache@v5.0.4
         id: playwright-cache
         with:
           path: |

.github/workflows/python-api-client.yaml

@@ -53,7 +53,7 @@ jobs:
       id: docver
 
     - name: Setup Ruby
-      uses: ruby/setup-ruby@v1
+      uses: ruby/setup-ruby@v1.300.0
       with:
         working-directory: clients/python
         ruby-version: '3.2'

.github/workflows/python-wrapper-unit-tests.yaml

@@ -13,7 +13,7 @@ jobs:
       sdk-change: ${{ steps.filter.outputs.sdk == 'true' }}
     steps:
       - uses: actions/checkout@v6
-      - uses: dorny/paths-filter@v4
+      - uses: dorny/paths-filter@v4.0.1
         id: filter
         with:
           filters: |