chore(deps): June bulk updates

.github/workflows/code-checks.yaml

@@ -12,13 +12,13 @@ jobs:
   linting:
     runs-on: ubuntu-latest 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         id: setup-python
         with:
-          python-version: '3.12'
+          python-version: '3.14'
       - name: Set up cache
-        uses: actions/cache@v4
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6
         id: cached-poetry-dependencies
         with:
           path: ./.venv
@@ -46,7 +46,7 @@ jobs:
   license-header-check:
     runs-on: ubuntu-latest 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
       - name: Check Cortado files for a license header
         run: |
           bash ./scripts/check-license.sh ./cortado
@@ -59,12 +59,12 @@ jobs:
   unit-tests:
     runs-on: ubuntu-latest 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
-          python-version: '3.12'
+          python-version: '3.14'
       - name: Set up cache
-        uses: actions/cache@v4
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6
         id: cached-poetry-dependencies
         with:
           path: ./.venv
@@ -88,13 +88,13 @@ jobs:
   dependency-check-for-minimal-package:
     runs-on: ubuntu-latest 
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         id: setup-python
         with:
-          python-version: '3.12'
+          python-version: '3.14'
       - name: Set up cache
-        uses: actions/cache@v4
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6
         id: cached-poetry-dependencies
         with:
           path: ./.venv

.github/workflows/community.yml

@@ -15,7 +15,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Check if member of elastic org
-        uses: actions/github-script@v6
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         id: membership
         with:
           github-token: ${{ secrets.READ_CORTADO_ELASTIC_ORG_TOKEN }}
@@ -43,7 +43,7 @@ jobs:
 
 
       - name: Add label for community members
-        uses: actions/github-script@v6
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         if: ${{ steps.membership.outputs.result == 'notMember' }}
         with:
           script: |

.github/workflows/release.yaml

@@ -11,16 +11,16 @@ jobs:
       contents: write
     runs-on: ubuntu-latest 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
         with:
           fetch-depth: 0
           fetch-tags: true
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         id: setup-python
         with:
-          python-version: '3.12'
+          python-version: '3.14'
       - name: Set up cache
-        uses: actions/cache@v4
+        uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6
         id: cached-poetry-dependencies
         with:
           path: ./.venv