build(deps): Bump the github-actions group across 1 directory with 5 updates

.github/workflows/api_tests.yml

@@ -1,3 +1,3 @@
 # Copyright 2026 OpenC3, Inc.
 # All Rights Reserved.
 #
@@ -59,7 +59,7 @@
         # with:
         #   fetch-depth: 0 # all history for all branches and tags
       - name: Set up Ruby ${{ matrix.ruby-version }}
-        uses: ruby/setup-ruby@984c0c890880bbf811283d6f09c4607c62d210a4 # v1.323.0
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
         env:
           OPENC3_DEVEL: ../openc3
         with:
@@ -76,7 +76,7 @@
         working-directory: openc3-cosmos-cmd-tlm-api
         env:
           OPENC3_DEVEL: ../openc3
-      - uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
+      - uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           directory: openc3-cosmos-cmd-tlm-api/coverage
           flags: ruby-api # See codecov.yml
@@ -109,7 +109,7 @@
         # with:
         #   fetch-depth: 0
       - name: Set up Ruby ${{ matrix.ruby-version }}
-        uses: ruby/setup-ruby@984c0c890880bbf811283d6f09c4607c62d210a4 # v1.323.0
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
         env:
           OPENC3_DEVEL: ../openc3
         with:
@@ -124,7 +124,7 @@
         working-directory: openc3-cosmos-script-runner-api
         env:
           OPENC3_DEVEL: ../openc3
-      - uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
+      - uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           directory: openc3-cosmos-script-runner-api/coverage
           flags: ruby-api # See codecov.yml
@@ -164,7 +164,7 @@
           uv run --frozen coverage run -m pytest ../../openc3-cosmos-script-runner-api/test/
           uv run --frozen coverage xml -i
         working-directory: openc3/python
-      - uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
+      - uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           working-directory: openc3/python
           flags: python # See codecov.yml

.github/workflows/clamav.yml

@@ -1,3 +1,3 @@
 # Copyright 2026 OpenC3, Inc.
 # All Rights Reserved.
 #
@@ -35,7 +35,7 @@
 
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Set up Ruby 3.4
-        uses: ruby/setup-ruby@984c0c890880bbf811283d6f09c4607c62d210a4 # v1.323.0
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
         with:
           ruby-version: 3.4
           bundler-cache: false # runs 'bundle install' and caches installed gems automatically

.github/workflows/codeql.yaml

@@ -1,3 +1,3 @@
 # Copyright 2026 OpenC3, Inc.
 # All Rights Reserved.
 #
@@ -65,7 +65,7 @@
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
+        uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
@@ -78,6 +78,6 @@
           # queries: security-extended,security-and-quality
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
+        uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
         with:
           category: "/language:${{matrix.language}}"

.github/workflows/playwright.yml

@@ -1,3 +1,3 @@
 # Copyright 2026 OpenC3, Inc.
 # All Rights Reserved.
 #
@@ -123,7 +123,7 @@
         # in playwright.config.ts, so no --grep-invert is needed here.
         run: ./playwright.sh run-chromium
         working-directory: playwright
-      - uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
+      - uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           files: playwright/coverage/lcov.info
           flags: frontend # See codecov.yml

.github/workflows/post_release_clamav.yml

@@ -1,3 +1,3 @@
 # Copyright 2026 OpenC3, Inc.
 # All Rights Reserved.
 #
@@ -65,7 +65,7 @@
             console.log("found release for tag", tag);
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Set up Ruby 3.4
-        uses: ruby/setup-ruby@984c0c890880bbf811283d6f09c4607c62d210a4 # v1.323.0
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
         with:
           ruby-version: 3.4
           bundler-cache: false # runs 'bundle install' and caches installed gems automatically

.github/workflows/python_lint.yml

@@ -1,3 +1,3 @@
 # Copyright 2026 OpenC3, Inc.
 # All Rights Reserved.
 #
@@ -90,7 +90,7 @@
         # security-events, so tolerate the upload failing there rather than
         # failing the job for every outside contributor
         continue-on-error: true
-        uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
+        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
         with:
           sarif_file: openc3/python/uv-audit.sarif
           category: uv-audit

.github/workflows/python_type_check.yml

@@ -1,3 +1,3 @@
 # Copyright 2026 OpenC3, Inc.
 # All Rights Reserved.
 #
@@ -97,7 +97,7 @@
         # Pull requests from forks get a read-only token, so the upload is
         # expected to fail there; the summary and artifact still work
         continue-on-error: true
-        uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
+        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
         with:
           sarif_file: openc3/python/ty.sarif
           category: ty

.github/workflows/python_unit_tests.yml

@@ -1,3 +1,3 @@
 # Copyright 2026 OpenC3, Inc.
 # All Rights Reserved.
 #
@@ -63,7 +63,7 @@
         working-directory: openc3/python
       - name: Prune uv cache
         run: uv cache prune --ci
-      - uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
+      - uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           working-directory: openc3/python
           flags: python # See codecov.yml

.github/workflows/release.yml

@@ -1,3 +1,3 @@
 # Copyright 2026 OpenC3, Inc.
 # All Rights Reserved.
 #
@@ -50,7 +50,7 @@
         with:
           token: ${{ secrets.QA_PAT }}
       - name: Set up Ruby 3.4
-        uses: ruby/setup-ruby@984c0c890880bbf811283d6f09c4607c62d210a4 # v1.323.0
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
         with:
           ruby-version: 3.4
           bundler-cache: false # runs 'bundle install' and caches installed gems automatically

.github/workflows/ruby_unit_tests.yml

@@ -1,3 +1,3 @@
 # Copyright 2026 OpenC3, Inc.
 # All Rights Reserved.
 #
@@ -49,7 +49,7 @@
 
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Set up Ruby ${{ matrix.ruby-version }}
-        uses: ruby/setup-ruby@984c0c890880bbf811283d6f09c4607c62d210a4 # v1.323.0
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
         with:
           ruby-version: ${{ matrix.ruby-version }}
           bundler-cache: true # runs 'bundle install' and caches installed gems automatically
@@ -59,7 +59,7 @@
         working-directory: openc3
         env:
           OPENC3_DEVEL: ${GITHUB_WORKSPACE}/openc3
-      - uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
+      - uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           directory: openc3/coverage
           flags: ruby-backend # See codecov.yml
@@ -70,7 +70,7 @@
         env:
           OPENC3_NO_EXT: 1
           OPENC3_DEVEL: ${GITHUB_WORKSPACE}/openc3
-      - uses: codecov/codecov-action@0b35c9ecc4f0529d0eb674914510c22f85b196b4 # v7.1.0
+      - uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1
         with:
           directory: openc3/coverage
           flags: ruby-backend # See codecov.yml

.github/workflows/scorecards.yml

@@ -76,6 +76,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0
+        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
         with:
           sarif_file: results.sarif

.github/workflows/tsdb_integration_tests.yml

@@ -86,7 +86,7 @@ jobs:
           sync: "false"
 
       - name: Set up Ruby
-        uses: ruby/setup-ruby@984c0c890880bbf811283d6f09c4607c62d210a4 # v1.323.0
+        uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1.327.0
         with:
           ruby-version: "3.4"
           bundler-cache: true # runs 'bundle install' and caches installed gems automatically