chore(deps): update actions [skip pre-commit.ci] (#1203)

| datasource  | package                     | from    | to      |
| ----------- | --------------------------- | ------- | ------- |
| github-tags | alstr/todo-to-issue-action  | v5.1.13 | v5.1.14 |
| github-tags | reviewdog/action-actionlint | v1.70.0 | v1.71.0 |

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/ci.yml

@@ -195,7 +195,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
       - name: Validate
-        uses: reviewdog/action-actionlint@e58ee9d111489c31395fbe4857b0be6e7635dbda  # v1.70.0
+        uses: reviewdog/action-actionlint@0d952c597ef8459f634d7145b0b044a9699e5e43  # v1.71.0
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           level: ${{ env.REVIEWDOG_LEVEL }}

.github/workflows/docker-push.yml

@@ -101,7 +101,7 @@ jobs:
         id: build_date
         run: echo "date=$(./.github/scripts/docker.sh generate-build-date)" >> "$GITHUB_OUTPUT"
       - name: Build and Push
-        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83  # v6
+        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8  # v6
         timeout-minutes: 15
         env:
           SOURCE_DATE_EPOCH: ${{ steps.source_date.outputs.epoch }}

.github/workflows/docker.yml

@@ -155,7 +155,7 @@ jobs:
       # - Build metadata (tags/labels) for image identification
       # - Build-time variables for versioning and traceability
       - name: Build
-        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83  # v6
+        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8  # v6
         timeout-minutes: 10
         with:
           # Build context directory (current directory)
@@ -420,7 +420,7 @@ jobs:
       # - Build-time variables for versioning and traceability
       - name: Build for Validation
         id: build_validate
-        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83  # v6
+        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8  # v6
         timeout-minutes: 15
         env:
           # Set SOURCE_DATE_EPOCH for reproducible builds
@@ -508,7 +508,7 @@ jobs:
       # This second build will be fast due to BuildKit cache from validation build
       - name: Push Validated Image with Attestations
         if: success()
-        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83  # v6
+        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8  # v6
         timeout-minutes: 5
         env:
           # Set SOURCE_DATE_EPOCH for reproducible builds

.github/workflows/maintenance.yml

@@ -55,7 +55,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Convert
-        uses: alstr/todo-to-issue-action@c45b007d85c8edf3365b139a9d4c65793e7c674f  # v5.1.13
+        uses: alstr/todo-to-issue-action@64aca8fda7023259aada83ba44ad988c4c443657  # v5.1.14
         with:
           CLOSE_ISSUES: true
           INSERT_ISSUE_URLS: true

.github/workflows/security.yml

@@ -65,11 +65,11 @@ jobs:
       - name: Checkout
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2  # v4
+        uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e  # v4
         with:
           languages: python
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@45cbd0c69e560cd9e7cd7f8c32362050c9b7ded2  # v4
+        uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e  # v4
         with:
           category: /language:python
   dependencies: