chore(deps): bump the dependencies group across 1 directory with 9 updates

.github/workflows/check-webui-docs-links.yaml

@@ -21,7 +21,7 @@ jobs:
     # Never block on broken links - they can be fixed after release.
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.release.tag_name || github.ref }}
 

.github/workflows/claude.yml

@@ -26,13 +26,13 @@ jobs:
       actions: read # Required for Claude to read CI results on PRs
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@v1
+        uses: anthropics/claude-code-action@v1.0.165
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
 

.github/workflows/close-stale-prs.yaml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
     - name: Close stale issues and PRs
-      uses: actions/stale@v10
+      uses: actions/stale@v10.3.0
       with:
         stale-pr-message: 'This PR is now marked as stale after 30 days of inactivity, and will be closed soon. To keep it, mark it with the "no stale" label.'
         close-pr-message: 'Closing this PR because it has been stale for 7 days with no activity.'

.github/workflows/codeql-analysis.yaml

@@ -19,13 +19,13 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4
+      uses: github/codeql-action/init@v4.36.3
       with:
         languages: 'go, javascript'
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4
+      uses: github/codeql-action/analyze@v4.36.3
 

.github/workflows/compatibility-tests.yaml

@@ -17,15 +17,15 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Check-out code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Setup Go
         uses: actions/setup-go@v6
         with:
           go-version-file: 'go.mod'
         id: go
 
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.4.0
         with:
           distribution: "adopt-hotspot"
           java-version: "8"
@@ -53,7 +53,7 @@ jobs:
       image_id: ${{ steps.build_export.outputs.ImageID }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Extract version
         shell: bash
@@ -208,9 +208,9 @@ jobs:
       SPARK_TAG: ${{ matrix.spark.tag }}
     steps:
       - name: Check-out code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.4.0
         with:
           distribution: "adopt-hotspot"
           java-version: ${{ matrix.spark.java_version }}
@@ -289,7 +289,7 @@ jobs:
       SPARK_TAG: 3
     steps:
       - name: Check-out code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
@@ -303,7 +303,7 @@ jobs:
       - name: Load Docker image
         run: docker load --input /tmp/lakefs.tar
 
-      - uses: actions/setup-java@v5
+      - uses: actions/setup-java@v5.4.0
         with:
           distribution: "adopt-hotspot"
           java-version: "8"
@@ -366,7 +366,7 @@ jobs:
     if: ${{ always() && contains(needs.*.result, 'failure') }}
     steps:
       - name: slack-send
-        uses: slackapi/slack-github-action@v3
+        uses: slackapi/slack-github-action@v3.0.3
         with:
           webhook: ${{ secrets.SLACK_WEBHOOK_URL }}
           webhook-type: incoming-webhook

.github/workflows/docker-publish-exp-image.yaml

@@ -24,7 +24,7 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           # This is used to fetch all the history in order to get the latest tag (for step "Extract Version")
           fetch-depth: 0

.github/workflows/docker-publish-lakefs-rclone-export.yaml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Extract version
         shell: bash
@@ -32,7 +32,7 @@ jobs:
         id: version
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v6
+        uses: aws-actions/configure-aws-credentials@v6.2.1
         with:
           aws-region: us-east-1
           role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}

.github/workflows/docker-publish.yaml

@@ -20,7 +20,7 @@ jobs:
     steps:
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up NodeJS
         uses: actions/setup-node@v6
@@ -55,7 +55,7 @@ jobs:
         run: make checks-validator
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v6
+        uses: aws-actions/configure-aws-credentials@v6.2.1
         with:
           aws-region: us-east-1
           role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}