[actions] Update GitHub Actions versions - 2026-07-06

[github-actions]

GitHub Actions Updates - 2026-07-06

This PR updates GitHub Actions versions in .github/aw/actions-lock.json to their latest compatible releases.

📦 Actions Updated (full list)

Actions Updated

• denoland/setup-deno: v2.0.4 → v2.0.5
• docker/build-push-action: v7.2.0 → v7.3.0
• docker/login-action: v4.2.0 → v4.4.0
• docker/metadata-action: v6.1.0 → v6.2.0
• docker/setup-buildx-action: v4.1.0 → v4.2.0
• erlef/setup-beam: v1.24.0 → v1.24.1
• github/codeql-action/upload-sarif: v4.36.2 → v4.36.3
• ruby/setup-ruby: v1.314.0 → v1.316.0

Summary

• Total actions updated: 8
• Update command: gh aw update
• Stale container pins pruned: 102
• Workflow lock files: Not included (will be regenerated on next compile)

Notes

• All action updates respect semantic versioning and maintain compatibility
• Actions are pinned to commit SHAs for security
• Workflow .lock.yml files are excluded from this PR and will be regenerated during the next compilation
• 2 workflows (agentic-token-audit, agentic-token-optimizer) could not be updated due to network issues fetching upstream source; they remain at their current versions

Testing

The updated actions will be automatically used in workflow compilations. No manual testing required.

---

This PR was automatically created by the Daily Workflow Updater workflow.

Generated by 🔧 Daily Workflow Updater · 29.1 AIC · ⌖ 19.2 AIC · ⊞ 5.3K · ◷

• expires on Jul 7, 2026, 12:33 AM UTC-08:00

---

Note

This was originally intended as a pull request, but the git push operation failed.

Original error: The process '/usr/bin/git' failed with exit code 1

Workflow Run: View run details and download bundle artifact

The bundle file is available in the agent artifact in the workflow run linked above.

To create a pull request with the changes:

# Download the artifact from the workflow run
gh run download 28778039623 -n agent -D /tmp/agent-28778039623

# Fetch the bundle into a temporary ref, then update the local branch
git fetch /tmp/agent-28778039623/aw-actions-update-2026-07-06.bundle refs/heads/actions-update-2026-07-06:refs/bundles/create-pr-actions-update-2026-07-06-6f53e190051aa168-d2fda00f
git update-ref refs/heads/actions-update-2026-07-06-6f53e190051aa168 refs/bundles/create-pr-actions-update-2026-07-06-6f53e190051aa168-d2fda00f
git checkout actions-update-2026-07-06-6f53e190051aa168
# Ensure the working tree matches the updated branch
git reset --hard
# Remove the temporary bundle ref
git update-ref -d refs/bundles/create-pr-actions-update-2026-07-06-6f53e190051aa168-d2fda00f

# Push the branch to origin
git push origin actions-update-2026-07-06-6f53e190051aa168

# Create the pull request
gh pr create --title '[actions] Update GitHub Actions versions - 2026-07-06' --base main --head actions-update-2026-07-06-6f53e190051aa168 --repo github/gh-aw