Bump the actions group with 8 updates

.github/workflows/build-deps.yaml

@@ -28,7 +28,7 @@ jobs:
           persist-credentials: false
       - name: Cache Workshop snap
         id: cache-workshop
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: workshop_*.snap
           key: workshop-snap-${{ github.sha }}
@@ -43,7 +43,7 @@ jobs:
           snap_file=$(ls workshop_*.snap)
           echo "snap=$snap_file" >> $GITHUB_OUTPUT
       - name: Upload Workshop
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: snap_workshop
           path: ${{ steps.cache-workshop.outputs.cache-hit == 'true' && steps.snapcraft_workshop_cached.outputs.snap || steps.snapcraft_workshop.outputs.snap }}
@@ -67,7 +67,7 @@ jobs:
         uses: canonical/action-build@3bdaa03e1ba6bf59a65f84a751d943d549a54e79 # v1.3.0
         id: snapcraft_workshop_arm64
       - name: Upload Workshop (arm64)
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: snap_workshop_arm64
           path: ${{ steps.snapcraft_workshop_arm64.outputs.snap }}
@@ -87,13 +87,13 @@ jobs:
           echo "sha=$spread_sha" >> $GITHUB_OUTPUT
       - name: Cache spread binary
         id: cache-spread
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: spread/spread
           key: spread-binary-${{ steps.spread-sha.outputs.sha }}
       - name: Setup Go
         if: steps.cache-spread.outputs.cache-hit != 'true'
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "1.26"
           cache: false
@@ -107,7 +107,7 @@ jobs:
           retry 5 go build -o spread ./cmd/spread
           popd
       - name: Upload spread binary
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: spread_binary
           path: spread/spread

.github/workflows/cover.yaml

@@ -49,7 +49,7 @@ jobs:
           pattern: "*code-coverage*"
 
       - name: Setup Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "1.26"
 
@@ -88,7 +88,7 @@ jobs:
           printf 'mode=%s\n' "$mode" >>"$GITHUB_OUTPUT"
 
       - name: TICS GitHub Action
-        uses: tiobe/tics-github-action@a53037a6bb9f71b6a97cdeb0ac41632266804b9e # v3.8.0
+        uses: tiobe/tics-github-action@016a4d79f3027fe7b4a2901619a58c745ab7cadf # v3.10.0
         with:
           mode: ${{ steps.tics-mode.outputs.mode }}
           viewerUrl: https://canonical.tiobe.com/tiobeweb/TICS/api/cfg?name=GoProjects

.github/workflows/doc-update-sdk-schema.yml

@@ -27,7 +27,7 @@ jobs:
           python-version: "3.11"
 
       - name: Install uv
-        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
 
       - name: Install system dependencies
         run: |

.github/workflows/fix-redirected-links.yml

@@ -53,7 +53,7 @@ jobs:
         run: echo "version=$(<"$DOCS_DIR/lychee-version")" >> "$GITHUB_OUTPUT"
 
       - name: Run lychee
-        uses: lycheeverse/lychee-action@faea714062690f6c2e6f7f388469ec4fa6d9c4e1 # master pre-v2.8.1: PR #330 nested-tarball fix for lychee 0.24.x
+        uses: lycheeverse/lychee-action@6da1d14f3a43098a294b7696d93d938aa8d20fc0 # master pre-v2.8.1: PR #330 nested-tarball fix for lychee 0.24.x
         with:
           workingDirectory: ./docs
           args: --config lychee.toml -vv .
@@ -212,7 +212,7 @@ jobs:
 
       - name: Upload artifacts
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: linkcheck-redirect-fixes
           if-no-files-found: warn

.github/workflows/lint.yaml

@@ -20,7 +20,7 @@ jobs:
           fetch-depth: 1
           persist-credentials: false
 
-      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "1.26"
           cache: false

.github/workflows/lxd-candidate-check.yaml

@@ -34,7 +34,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Setup Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "1.26"
           cache: false

.github/workflows/release.yaml

@@ -25,7 +25,7 @@ jobs:
       - uses: canonical/action-build@3bdaa03e1ba6bf59a65f84a751d943d549a54e79 # v1.3.0
         id: snapcraft
 
-      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: snap-${{ matrix.runner.arch }}
           path: ${{ steps.snapcraft.outputs.snap }}
@@ -72,7 +72,7 @@ jobs:
       - noble
     steps:
       - name: Set up Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "1.26"
 

.github/workflows/scanning.yml

@@ -19,7 +19,7 @@ jobs:
           persist-credentials: false
 
       - name: Run Github Trivy FS Action
-        uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # v0.35.0
+        uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
         with:
           scan-type: "fs"
           scan-ref: "."

.github/workflows/spread.yaml

@@ -48,7 +48,7 @@ jobs:
           fetch-depth: 0
           persist-credentials: false
       - name: Setup Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "1.26"
           cache: false
@@ -78,7 +78,7 @@ jobs:
         run: |
           echo "sanitized_name=${SUITE_NAME%/}" >> "$GITHUB_OUTPUT"
       - name: Upload Coverage
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: code-coverage-${{ steps.sanitize.outputs.sanitized_name }}
           path: ${{ github.workspace }}.cover/lxd:ubuntu-24.04:tests/

.github/workflows/unit-tests.yaml

@@ -13,7 +13,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "1.26"
 
@@ -25,7 +25,7 @@ jobs:
 
       - name: Upload Coverage
         id: upload-coverage
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: code-coverage-unit
           path: ${{ github.workspace }}.cover/
@@ -37,7 +37,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
         with:
           go-version: "1.26"
 

.github/workflows/update-sphinx-stack.yaml

@@ -20,7 +20,7 @@ jobs:
           python-version: "3.11"
 
       - name: Install uv
-        uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
 
       - name: Checkout Code
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

.github/workflows/zizmor.yaml

@@ -20,7 +20,7 @@ jobs:
           persist-credentials: false
 
       - name: Audit workflows
-        uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
+        uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
         with:
           advanced-security: false
           # TODO: enable this when we go public