chore(deps): update github actions

Author: renovate[bot]

.github/workflows/build.yml

@@ -28,7 +28,7 @@ jobs:
     permissions:
       id-token: write
     steps:
-      - uses: SonarSource/ci-github-actions/get-build-number@94416c84682255b8f6e189d54d323d5d41195278 # 1.3.26
+      - uses: SonarSource/ci-github-actions/get-build-number@c15f3733837c5ebd0f04a676feb1e18fae147cd5 # 1.3.27
         id: build-number
 
   build:
@@ -43,11 +43,11 @@ jobs:
     outputs:
       build_number: ${{ steps.build.outputs.build_number }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
-      - uses: jdx/mise-action@665d82088236dd987b2af6165be29d21e2e11184 # v3.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3
         with:
           version: 2026.3.2
-      - uses: SonarSource/ci-github-actions/build-maven@94416c84682255b8f6e189d54d323d5d41195278 # 1.3.26
+      - uses: SonarSource/ci-github-actions/build-maven@c15f3733837c5ebd0f04a676feb1e18fae147cd5 # 1.3.27
         id: build
         with:
           sonar-platform: none
@@ -69,10 +69,10 @@ jobs:
     env:
       BUILD_NUMBER: ${{ needs.build-number.outputs.BUILD_NUMBER }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
-      - uses: jdx/mise-action@665d82088236dd987b2af6165be29d21e2e11184 # v3.0.0
+      - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3
         with:
           version: 2026.3.2
       - name: Vault
@@ -84,11 +84,11 @@ jobs:
             development/kv/data/next token | NEXT_TOKEN;
       - name: Cache Sonar Scanner artifacts
         id: sonar-scanner-cache
-        uses: SonarSource/ci-github-actions/cache@94416c84682255b8f6e189d54d323d5d41195278 # 1.3.26
+        uses: SonarSource/ci-github-actions/cache@c15f3733837c5ebd0f04a676feb1e18fae147cd5 # 1.3.27
         with:
           path: ~/.sonar/cache
           key: sonar-scanner-${{ runner.os }}
-      - uses: SonarSource/ci-github-actions/config-maven@94416c84682255b8f6e189d54d323d5d41195278 # 1.3.26
+      - uses: SonarSource/ci-github-actions/config-maven@c15f3733837c5ebd0f04a676feb1e18fae147cd5 # 1.3.27
         id: config
         with:
           artifactory-reader-role: private-reader
@@ -136,11 +136,11 @@ jobs:
     env:
       BUILD_NUMBER: ${{ needs.build-number.outputs.BUILD_NUMBER }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
-      - uses: jdx/mise-action@665d82088236dd987b2af6165be29d21e2e11184 # v3.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3
         with:
           version: 2026.3.2
-      - uses: SonarSource/ci-github-actions/config-maven@94416c84682255b8f6e189d54d323d5d41195278 # 1.3.26
+      - uses: SonarSource/ci-github-actions/config-maven@c15f3733837c5ebd0f04a676feb1e18fae147cd5 # 1.3.27
         id: config
         with:
           artifactory-reader-role: private-reader
@@ -209,8 +209,8 @@ jobs:
             category: "-DexcludedGroups=SonarCloud"
             java: 17
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
-      - uses: jdx/mise-action@665d82088236dd987b2af6165be29d21e2e11184 # v3.0.0
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3
         with:
           version: 2026.3.2
       - name: Select Java ${{ matrix.java }}
@@ -227,7 +227,7 @@ jobs:
           echo "ORCHESTRATOR_HOME=${ORCHESTRATOR_HOME}" >> "$GITHUB_ENV"
           echo "Create dir ${ORCHESTRATOR_HOME} if needed"
           mkdir -p "${ORCHESTRATOR_HOME}"
-      - uses: SonarSource/ci-github-actions/cache@94416c84682255b8f6e189d54d323d5d41195278 # 1.3.26
+      - uses: SonarSource/ci-github-actions/cache@c15f3733837c5ebd0f04a676feb1e18fae147cd5 # 1.3.27
         if: ${{ matrix.sc != true && matrix.sq_version != 'DEV' }}
         with:
           path: ${{ github.workspace }}/orchestrator/${{ steps.month.outputs.month }}
@@ -246,7 +246,7 @@ jobs:
           secrets: |
             development/github/token/licenses-ro token | GITHUB_TOKEN;
 
-      - uses: SonarSource/ci-github-actions/config-maven@94416c84682255b8f6e189d54d323d5d41195278 # 1.3.26
+      - uses: SonarSource/ci-github-actions/config-maven@c15f3733837c5ebd0f04a676feb1e18fae147cd5 # 1.3.27
         with:
           artifactory-reader-role: private-reader
       - name: Run QA
@@ -263,7 +263,7 @@ jobs:
           mvn -f its/pom.xml -Dsonar.runtimeVersion=${{ matrix.sq_version }} ${{ matrix.category }} verify surefire-report:report
       - name: Generate QA test report on failure
         if: failure()
-        uses: dorny/test-reporter@3b635e8e7b844df7a28b859c64db3e064e2dfcdb
+        uses: dorny/test-reporter@574d6b100c0959c809ab18f599fee9873c114af0
         with:
           name: QA ${{ matrix.name }} Test Report
           reporter: java-junit
@@ -313,7 +313,7 @@ jobs:
     env:
       BUILD_NUMBER: ${{ needs.build-number.outputs.BUILD_NUMBER }}
     steps:
-      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
-      - uses: SonarSource/ci-github-actions/promote@94416c84682255b8f6e189d54d323d5d41195278 # 1.3.26
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: SonarSource/ci-github-actions/promote@c15f3733837c5ebd0f04a676feb1e18fae147cd5 # 1.3.27
         with:
           promote-pull-request: true

.github/workflows/full-release.yml

@@ -24,7 +24,7 @@ jobs:
 
   release:
     name: Release
-    uses: SonarSource/release-github-actions/.github/workflows/ide-automated-release.yml@d4cf9c09a3ee1efe7d4751c6c2c25fed4af93fcd # 1.4.0
+    uses: SonarSource/release-github-actions/.github/workflows/ide-automated-release.yml@93bd557fd79e727759808a61e813a232aba12c57 # 1.4.1
     if: always() && !failure() && !cancelled()
     permissions:
       statuses: read

.github/workflows/notify-failure.yml

@@ -24,7 +24,7 @@ jobs:
             development/kv/data/slack token | SLACK_BOT_TOKEN;
 
       - name: Slack Notification on Failure
-        uses: slackapi/slack-github-action@e090a7a7c0b2d9b7ae32bd34f086e680ce260b06 # v3.0.0
+        uses: slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95 # v3.0.1
         with:
           method: chat.postMessage
           token: ${{ fromJSON(steps.secrets.outputs.vault).SLACK_BOT_TOKEN }}

.github/workflows/shadow_scans.yml

@@ -16,11 +16,11 @@ jobs:
       id-token: write
       contents: write
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
-      - uses: jdx/mise-action@665d82088236dd987b2af6165be29d21e2e11184 # v3.0.0
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+      - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3
         with:
           version: 2026.3.2
-      - uses: SonarSource/ci-github-actions/build-maven@94416c84682255b8f6e189d54d323d5d41195278 # 1.3.26 # dogfood
+      - uses: SonarSource/ci-github-actions/build-maven@c15f3733837c5ebd0f04a676feb1e18fae147cd5 # 1.3.27 # dogfood
         with:
           maven-args: -Dcommercial -Dsonar.coverage.jacoco.xmlReportPaths=${{ github.workspace }}/report-aggregate/target/site/jacoco-aggregate/jacoco.xml
           run-shadow-scans: true