chore(ci): bump the github-actions-non-major group across 1 directory with 3 updates

.github/workflows/check.yml

@@ -12,7 +12,7 @@
       contents: read
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: 🦪 ✔ 🧼🧼🧼
@@ -26,27 +26,27 @@
         with:
           enable-cache: false
       - name: Install dependencies
         run: uv sync --extra dev
         working-directory: xtest
       - name: Lint xtest python
         run: |
           uv run ruff check .
           uv run ruff format --check .
           uv run pyright
         working-directory: xtest
       - name: Lint and test otdf-local
         run: |
           uv sync
           uv run ruff check .
           uv run ruff format --check .
           uv run pyright
           uv run pytest --maxfail=1 --disable-warnings -v --tb=short -m "not integration"
         working-directory: otdf-local
       - name: Lint and test otdf-sdk-mgr
         run: |
           uv sync
           uv run ruff check .
           uv run ruff format --check .
           uv run pyright
           uv run pytest --maxfail=1 --disable-warnings -v --tb=short -m "not integration"
         working-directory: otdf-sdk-mgr

.github/workflows/dependency-review.yaml

@@ -37,7 +37,7 @@ jobs:
 
       - name: Checkout
         if: ${{ github.event_name != 'merge_group' }}
-        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 

.github/workflows/vulnerability.yml

@@ -24,7 +24,7 @@
       contents: read
       packages: read
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
@@ -33,14 +33,14 @@
           registry-url: https://npm.pkg.github.com
       - name: Install dependencies
         run: |-
           npm ci
       - name: Check out and start up platform with deps/containers
         id: run-platform
         uses: opentdf/platform/test/start-up-with-containers@11af44a5d4826ed281bf2e0e4e31d6ff6154b393  # pqc-enabled
         with:
           platform-ref: ${{ inputs.platform-ref }}
       - name: Get grpcurl
         run: go install github.com/fullstorydev/grpcurl/cmd/grpcurl@v1.8.9
       - name: Make sure that the platform is up
         run: |
           grpcurl -plaintext localhost:8080 list && \

.github/workflows/xtest.yml

@@ -118,7 +118,7 @@
           CRON_NIGHTLY: ${{ github.event.schedule == '30 6 * * *' }}
           CRON_MONDAY_WEDNESDAY: ${{ github.event.schedule == '0 5 * * 1,3' }}
           CRON_WEEKLY: ${{ github.event.schedule == '0 18 * * 0' }}
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           path: otdf-sdk
           persist-credentials: false
@@ -273,7 +273,7 @@
         platform-tag: ${{ fromJSON(needs.resolve-versions.outputs.platform-tag-list) }}
         sdk-version: ${{ fromJSON(needs.resolve-versions.outputs.sdk-version-list) }}
     steps:
-      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: opentdf/tests
           path: otdftests # use different name bc other repos might have tests directories
@@ -324,7 +324,7 @@
           version: "1.56.0"
 
       - name: Set up JDK
-        uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287
+        uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95
         with:
           java-version: "11"
           distribution: "adopt"
@@ -371,7 +371,7 @@
 
       - name: Cache npm
         if: fromJson(steps.configure-js.outputs.heads)[0] != null
-        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.npm
           key: npm-${{ runner.os }}-${{ hashFiles('otdftests/xtest/sdk/js/src/**/package-lock.json') }}
@@ -399,7 +399,7 @@
 
       - name: Cache Go modules
         if: fromJson(steps.configure-go.outputs.heads)[0] != null
-        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.cache/go-build
@@ -434,7 +434,7 @@
 
       - name: Cache Maven repository
         if: fromJson(steps.configure-java.outputs.heads)[0] != null
-        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: ~/.m2/repository
           key: maven-${{ runner.os }}-${{ hashFiles('otdftests/xtest/sdk/java/src/**/pom.xml') }}
@@ -525,12 +525,12 @@
         working-directory: ${{ steps.run-platform.outputs.platform-working-dir }}
 
       - name: Install test dependencies
         run: uv sync
         working-directory: otdftests/xtest
       - name: Validate xtest helper library (tests of the test harness and its utilities)
         if: ${{ !inputs }}
         run: |-
           uv run pytest --html=test-results/helper-${FOCUS_SDK}-${PLATFORM_TAG}.html --self-contained-html --sdks-encrypt "${ENCRYPT_SDK}" test_self.py test_audit_logs.py
         working-directory: otdftests/xtest
         env:
           PLATFORM_TAG: ${{ matrix.platform-tag }}
@@ -539,8 +539,8 @@
       - name: Validate otdf-local integration tests
         if: ${{ !inputs }}
         run: |-
           uv sync
           uv run pytest --maxfail=1 --disable-warnings -v --tb=short -m integration
         working-directory: otdftests/otdf-local
         env:
           OTDF_LOCAL_PLATFORM_DIR: ${{ github.workspace }}/${{ steps.run-platform.outputs.platform-working-dir }}
@@ -549,7 +549,7 @@
       - name: Run legacy decryption tests
         run: |-
           skip_flag=$([[ "$SKIP_RELEASED_PAIRS" == "true" ]] && echo "--skip-released-pairs" || echo "")
           uv run pytest -n auto --dist worksteal --html=test-results/sdk-${FOCUS_SDK}-${PLATFORM_TAG}.html --self-contained-html --sdks-decrypt "${ENCRYPT_SDK}" -ra -v --focus "$FOCUS_SDK" $skip_flag test_legacy.py
         working-directory: otdftests/xtest
         env:
           PLATFORM_DIR: "../../${{ steps.run-platform.outputs.platform-working-dir }}"
@@ -560,7 +560,7 @@
         if: ${{ env.FOCUS_SDK == 'all' }}
         run: |-
           skip_flag=$([[ "$SKIP_RELEASED_PAIRS" == "true" ]] && echo "--skip-released-pairs" || echo "")
           uv run pytest -n auto --dist loadscope --html=test-results/sdk-${FOCUS_SDK}-${PLATFORM_TAG}.html --self-contained-html --sdks-encrypt "${ENCRYPT_SDK}" -ra -v $skip_flag test_tdfs.py test_policytypes.py
         working-directory: otdftests/xtest
         env:
           PLATFORM_DIR: "../../${{ steps.run-platform.outputs.platform-working-dir }}"
@@ -572,7 +572,7 @@
         if: ${{ env.FOCUS_SDK != 'all' }}
         run: |-
           skip_flag=$([[ "$SKIP_RELEASED_PAIRS" == "true" ]] && echo "--skip-released-pairs" || echo "")
           uv run pytest -n auto --dist loadscope --html=test-results/sdk-${FOCUS_SDK}-${PLATFORM_TAG}.html --self-contained-html --sdks-encrypt "${ENCRYPT_SDK}" -ra -v --focus "$FOCUS_SDK" $skip_flag test_tdfs.py test_policytypes.py
         working-directory: otdftests/xtest
         env:
           PLATFORM_DIR: "../../${{ steps.run-platform.outputs.platform-working-dir }}"
@@ -682,7 +682,7 @@
         if: ${{ steps.multikas.outputs.supported == 'true' }}
         run: |-
           skip_flag=$([[ "$SKIP_RELEASED_PAIRS" == "true" ]] && echo "--skip-released-pairs" || echo "")
           uv run pytest -ra -v --numprocesses auto --dist loadscope \
             --html test-results/attributes-${FOCUS_SDK}-${PLATFORM_TAG}.html \
             --self-contained-html \
             --audit-log-dir test-results/audit-logs \