Bump the "workflows" group with 1 update across multiple ecosystems

.github/workflows/lint.yml

@@ -15,7 +15,7 @@ jobs:
       contents: read
 
     steps:
-      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
+      - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231
 
       - name: Check documentation exists
         shell: python

.github/workflows/reusable-github-matrix-tg.yml

@@ -28,7 +28,7 @@ jobs:
       matrix: ${{ steps.build-matrix.outputs.matrix }}
     steps:
       - name: Checkout
-        uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
+        uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231
 
       - name: Build Environment Matrix
         id: build-matrix

.github/workflows/reusable-pr-automated-approvals.yml

@@ -115,14 +115,14 @@ jobs:
 
       - name: Get Approver Alpha Token
         id: approver-alpha-token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1
         with:
           app-id: ${{ inputs.approver_alpha_app_id }}
           private-key: ${{ secrets.LAUNCH_APPROVER_ALPHA_KEY }}
 
       - name: Get Approver Bravo Token
         id: approver-bravo-token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1
         with:
           app-id: ${{ inputs.approver_bravo_app_id }}
           private-key: ${{ secrets.LAUNCH_APPROVER_BRAVO_KEY }}

.github/workflows/reusable-pr-conventional-commit-title.yml

@@ -133,7 +133,7 @@ jobs:
 
       - name: PR Conventional Commit Validation
         id: pr-validation
-        uses: ytanikin/pr-conventional-commits@1.5.1
+        uses: ytanikin/pr-conventional-commits@1.5.2
         with:
           task_types: ${{ inputs.task_types }}
           scope_types: ${{ inputs.scope_types }}
@@ -206,7 +206,7 @@ jobs:
       - id: set-status-check
         name: Set Status Check
         if: ${{ inputs.comment_on_failure }}
-        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.0
+        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.4
         with:
           check_name: "Conventional Commit PR Title"
           status: ${{ steps.pr-validation.outcome == 'success' && 'success' ||
@@ -218,7 +218,7 @@ jobs:
       - id: set-status-check-legacy
         name: Set Legacy Check
         if: ${{ inputs.comment_on_failure }}
-        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.0
+        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.4
         with:
           check_name: "Label Pull Request / Label Pull Request"
           status: ${{ steps.pr-validation.outcome == 'success' && 'success' ||

.github/workflows/reusable-pr-dependabot-automerge.yml

@@ -31,7 +31,7 @@ jobs:
       # Dependabot no longer owns the PR and subsequent actions runs that would otherwise be 
       # skipped for Dependabot-authored PRs (release on merge to main) will run as expected.
       - id: get-app-token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1
         with:
           app-id: ${{ inputs.skeleton_update_app_id }}
           private-key: ${{ secrets.LAUNCH_SKELETON_UPDATE_KEY }}

.github/workflows/reusable-pr-label-by-branch.yml

@@ -21,7 +21,7 @@ jobs:
       issues: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
+      - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231
       - name: Configure missing labels
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -39,7 +39,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
+      - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231
         with:
           fetch-depth: 0
       - name: Check prerequisites for auto-labeling
@@ -79,7 +79,7 @@ jobs:
 
           rm first-time-comment.md
 
-      - uses: launchbynttdata/launch-workflows/.github/actions/remove-dependabot-labels@0.14.2
+      - uses: launchbynttdata/launch-workflows/.github/actions/remove-dependabot-labels@0.15.4
         if: ${{ inputs.remove_dependabot_labels }}
         id: remove-dependabot-labels
         with:

.github/workflows/reusable-python-uv-pytest.yml

@@ -49,10 +49,10 @@ jobs:
       matrix:
         python-version: [ "${{ inputs.python-version }}" ]
     steps:
-      - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
+      - uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231
 
       - name: Restore cached asdf tools
-        uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
+        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae
         if: ${{ inputs.asdf-install }}
         id: cache
         with:
@@ -64,15 +64,15 @@ jobs:
         uses: asdf-vm/actions/install@b7bcd026f18772e44fe1026d729e1611cc435d47
 
       - name: Cache asdf tools
-        uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
+        uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae
         id: save-cache
         if: ${{ inputs.asdf-install && steps.cache.outputs.cache-hit != 'true' }}
         with:
           path: ~/.asdf
           key: ${{ runner.os }}-tool-versions-${{ hashFiles('.tool-versions') }}
 
       - name: Set up Python ${{ matrix.python-version }}
-        uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098
+        uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -102,7 +102,7 @@ jobs:
 
       - name: Report coverage
         if: ${{ inputs.report-coverage }}
-        uses: MishaKav/pytest-coverage-comment@26f986d2599c288bb62f623d29c2da98609e9cd4
+        uses: MishaKav/pytest-coverage-comment@dd5b80bde6d16941f336518e92929e89069d8451
         with:
           pytest-xml-coverage-path: ./htmlcov/coverage.xml
           title: Coverage report for Python ${{ matrix.python-version }}

.github/workflows/reusable-terraform-check-aws.yml

@@ -33,20 +33,20 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - id: get-app-token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1
         with:
           app-id: ${{ inputs.status_check_app_id }}
           private-key: ${{ secrets.LAUNCH_STATUS_CHECK_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
+        uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231
 
       - name: Setup asdf
         # We use the 'setup' variant of this action, because we have some custom behavior in
         # our .tool-versions file and Makefile to install plugins from outside the default registry.
         uses: asdf-vm/actions/setup@b7bcd026f18772e44fe1026d729e1611cc435d47
 
-      - uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
+      - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae
         # If we've cached the asdf tools, restore them based on the hash of the .tool-versions file.
         name: Restore cached asdf tools
         id: cache
@@ -69,7 +69,7 @@ jobs:
           git config user.email "noreply@launch.nttdata.com"
           make configure
 
-      - uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
+      - uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae
         # If we didn't restore the asdf tools, save them based on the hash of the .tool-versions file.
         id: save-cache
         name: Cache asdf tools
@@ -79,7 +79,7 @@ jobs:
           key: ${{ runner.os }}-tool-versions-${{ hashFiles('.tool-versions') }}
 
       - name: "Set Terraform Lint status to pending"
-        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.0
+        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.4
         with:
           check_name: "Terraform Lint"
           status: "pending"
@@ -93,7 +93,7 @@ jobs:
 
       - name: "Update Terraform Lint status"
         if: always() && steps.lint.outcome != 'skipped'
-        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.0
+        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.4
         with:
           check_name: "Terraform Lint"
           status: ${{ steps.lint.outcome == 'success' && 'success' || steps.lint.outcome
@@ -103,7 +103,7 @@ jobs:
 
       - id: aws-login
         name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7
+        uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885
         with:
           role-to-assume: ${{ inputs.assume_role_arn }}
           role-session-name: ${{ github.run_id }}
@@ -124,7 +124,7 @@ jobs:
           find examples -type f -name "provider.tf" -mindepth 2 -maxdepth 2 -exec bash -c 'grep -vE "profile\s=" "$1" > $1.tmp && mv $1.tmp $1' bash {} \;
 
       - name: "Set Terraform Tests status to pending"
-        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.0
+        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.4
         with:
           check_name: "Terraform Tests"
           status: "pending"
@@ -138,7 +138,7 @@ jobs:
 
       - name: "Update Terraform Tests status"
         if: always() && steps.test.outcome != 'skipped'
-        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.0
+        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.4
         with:
           check_name: "Terraform Tests"
           status: ${{ steps.test.outcome == 'success' && 'success' || steps.test.outcome

.github/workflows/reusable-terraform-check-azure.yml

@@ -28,20 +28,20 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - id: get-app-token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1
         with:
           app-id: ${{ inputs.status_check_app_id }}
           private-key: ${{ secrets.LAUNCH_STATUS_CHECK_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
+        uses: actions/checkout@900f2210b1d28bbbd0bd22d17926b9e224e8f231
 
       - name: Setup asdf
         # We use the 'setup' variant of this action, because we have some custom behavior in
         # our .tool-versions file and Makefile to install plugins from outside the default registry.
         uses: asdf-vm/actions/setup@b7bcd026f18772e44fe1026d729e1611cc435d47
 
-      - uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
+      - uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae
         # If we've cached the asdf tools, restore them based on the hash of the .tool-versions file.
         name: Restore cached asdf tools
         id: cache
@@ -65,7 +65,7 @@ jobs:
           export ARM_SUBSCRIPTION_ID="$TERRAFORM_CHECK_AZURE_SUBSCRIPTION_ID"
           make configure
 
-      - uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306
+      - uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae
         # If we didn't restore the asdf tools, save them based on the hash of the .tool-versions file.
         id: save-cache
         name: Cache asdf tools
@@ -75,7 +75,7 @@ jobs:
           key: ${{ runner.os }}-tool-versions-${{ hashFiles('.tool-versions') }}
 
       - name: "Set Terraform Lint status to pending"
-        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.0
+        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.4
         with:
           check_name: "Terraform Lint"
           status: "pending"
@@ -89,7 +89,7 @@ jobs:
 
       - name: "Update Terraform Lint status"
         if: always() && steps.lint.outcome != 'skipped'
-        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.0
+        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.4
         with:
           check_name: "Terraform Lint"
           status: ${{ steps.lint.outcome == 'success' && 'success' || steps.lint.outcome
@@ -98,14 +98,14 @@ jobs:
           github_token: ${{ steps.get-app-token.outputs.token }}
 
       - name: Azure login
-        uses: azure/login@a457da9ea143d694b1b9c7c869ebb04ebe844ef5
+        uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43
         with:
           client-id: ${{ secrets.TERRAFORM_CHECK_AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.TERRAFORM_CHECK_AZURE_TENANT_ID }}
           subscription-id: ${{ secrets.TERRAFORM_CHECK_AZURE_SUBSCRIPTION_ID }}
 
       - name: "Set Terraform Tests status to pending"
-        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.0
+        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.4
         with:
           check_name: "Terraform Tests"
           status: "pending"
@@ -119,7 +119,7 @@ jobs:
 
       - name: "Update Terraform Tests status"
         if: always() && steps.test.outcome != 'skipped'
-        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.0
+        uses: launchbynttdata/launch-workflows/.github/actions/update-status-check@0.15.4
         with:
           check_name: "Terraform Tests"
           status: ${{ steps.test.outcome == 'success' && 'success' || steps.test.outcome