chore: update gh

.github/actions/docker-image/action.yml

@@ -16,11 +16,11 @@ runs:
   using: "composite"
   steps:
     - name: Get Docker Image layer contents
-      uses: MaxymVlasov/dive-action@62dde811c401b3b342b69bd42b28e5042b79ef86 # 1.6.0
+      uses: MaxymVlasov/dive-action@726042660e3c8f7263350e14b202cc35d671db20 # 2.0.0
       with:
         image: ${{ inputs.image }}
     - name: Run Trivy vulnerability scanner
-      uses: aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1 # 0.35.0
+      uses: aquasecurity/trivy-action@a9c7b0f06e461e9d4b4d1711f154ee024b8d7ab8 # 0.36.0
       with:
         image-ref: "${{ inputs.image }}"
         format: sarif

.github/actions/vagrant-setup/action.yml

@@ -17,7 +17,7 @@ runs:
   using: "composite"
   steps:
     - name: Cache Vagrant boxes
-      uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # 5.0.3
+      uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # 5.0.5
       with:
         path: ~/.vagrant.d/boxes
         key: ${{ runner.os }}-vagrant-${{ inputs.distro }}-${{ hashFiles('distros_supported.yml') }}

.github/workflows/build.yml

@@ -30,7 +30,7 @@ jobs:
     if: >-
       ( github.event_name == 'pull_request_review' && github.event.review.state == 'approved' ) || github.event_name != 'pull_request_review'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - name: Install requirements
@@ -76,7 +76,7 @@ jobs:
     if: >-
       ( github.event_name == 'pull_request_review' && github.event.review.state == 'approved' ) || github.event_name != 'pull_request_review'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - uses: ./.github/actions/vagrant-setup

.github/workflows/diagram.yml

@@ -24,7 +24,7 @@ jobs:
       contents: write # for technote-space/create-pr-action to push code
       pull-requests: write # for technote-space/create-pr-action to create a PR
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - name: Update diagram

.github/workflows/distros.yml

@@ -22,10 +22,10 @@ jobs:
       pull-requests: write # for technote-space/create-pr-action to create a PR
     runs-on: vm-self-hosted
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
-      - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # 5.0.3
+      - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # 5.0.5
         with:
           path: ~/.vagrant.d/boxes
           key: ${{ runner.os }}-vagrant-${{ hashFiles('distros_supported.yml') }}

.github/workflows/linter.yml

@@ -20,11 +20,11 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - name: Setup Go
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # 6.3.0
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # 6.4.0
         with:
           go-version: ">=1.20.0"
           cache: false
@@ -38,7 +38,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - name: Check broken links
@@ -51,13 +51,13 @@ jobs:
       models: read
       issues: write
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           fetch-depth: 0
           persist-credentials: false
       - name: Run super-linter validation
         id: linter-validation
-        uses: super-linter/super-linter@61abc07d755095a68f4987d1c2c3d1d64408f1f9 # 8.5.0
+        uses: super-linter/super-linter@9e863354e3ff62e0727d37183162c4a88873df41 # 8.6.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           LINTER_RULES_PATH: /
@@ -66,15 +66,15 @@ jobs:
           VALIDATE_SHELL_SHFMT: false
           VALIDATE_BIOME_FORMAT: false
           DEFAULT_BRANCH: ${{ github.head_ref || github.ref_name }}
-      - uses: GrantBirki/git-diff-action@7420e4d095c27bb23359787640976d60c94fd216 # 2.8.1
+      - uses: GrantBirki/git-diff-action@b27608d18e6dd9b31b46ede56a93e045d3881a28 # 3.0.0
         id: git-diff
         if: failure()
       - name: Get failed linter logs
         id: get-failed-linters
         if: failure()
         run: |
           find ./super-linter-output/super-linter/ -name '*.json' -exec sh -c 'jq -e ".Exitval != 0" "$1" >/dev/null && printf "%s\0" "$1"' _ {} \; | xargs -0 jq -s '.' > linter-errors.json
-      - uses: actions/ai-inference@a6101c89c6feaecc585efdd8d461f18bb7896f20 # 2.0.5
+      - uses: actions/ai-inference@a7805884c80886efc241e94a5351df715968a0ad # 2.1.1
         id: ai-linter-analysis
         if: failure()
         with:
@@ -128,7 +128,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - name: Install tox

.github/workflows/on-demand.yml

@@ -26,7 +26,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - name: Run the sh-checker
@@ -43,7 +43,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - name: Install ShellSpec

.github/workflows/on-demand_aio.yml

@@ -29,7 +29,7 @@ jobs:
     if: >-
       ( github.event_name == 'pull_request_review' && github.event.review.state == 'approved' ) || github.event_name != 'pull_request_review'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - name: Get matrix values
@@ -60,7 +60,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - uses: ./.github/actions/vagrant-setup
@@ -85,7 +85,7 @@ jobs:
     if: >-
       ( github.event_name == 'pull_request_review' && github.event.review.state == 'approved' ) || github.event_name != 'pull_request_review'
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - name: Install requirements

.github/workflows/on-demand_noha.yml

@@ -32,7 +32,7 @@ jobs:
       VAGRANT_EXPERIMENTAL: disks
       OS_NUM_COMPUTE_NODES: 1
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - uses: ./.github/actions/vagrant-setup

.github/workflows/scheduled_aio.yml

@@ -20,7 +20,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - name: Get matrix values
@@ -51,7 +51,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - uses: ./.github/actions/vagrant-setup

.github/workflows/spell.yml

@@ -25,7 +25,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - uses: reviewdog/action-misspell@d6429416b12b09b4e2768307d53bef58d172e962 # 1.27.0
@@ -37,7 +37,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: false
       - uses: igsekor/pyspelling-any@44278deea34ea69d8f0d5179ac409c140b0a2f5a # 1.0.5

.github/workflows/update.yml

@@ -70,10 +70,10 @@ jobs:
             python_version: 3.12
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: true
-      - uses: astral-sh/setup-uv@e06108dd0aef18192324c70427afc47652e63a82 # 7.5.0
+      - uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # 8.2.0
         with:
           enable-cache: true
           python-version: ${{ matrix.python_version }}
@@ -91,7 +91,7 @@ jobs:
       contents: write # for technote-space/create-pr-action to push code
       pull-requests: write # for technote-space/create-pr-action to create a PR
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           persist-credentials: true
       - uses: technote-space/create-pr-action@91114507cf92349bec0a9a501c2edf1635427bc5 # 2.1.4
@@ -121,7 +121,7 @@ jobs:
       contents: write # for technote-space/create-pr-action to push code
       pull-requests: write # for technote-space/create-pr-action to create a PR
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # 6.0.2
+      - uses: actions/checkout@9f698171ed81b15d1823a05fc7211befd50c8ae0 # 6.0.3
         with:
           # Fine-grained PAT with contents:write and workflows:write scopes
           token: ${{ secrets.WORKFLOW_TOKEN }} # zizmor: ignore[secrets-outside-env]

requirements/2023.2/debian_11.txt

@@ -6,21 +6,21 @@ bcrypt==5.0.0
     # via
     #   kolla-ansible
     #   passlib
-certifi==2026.2.25
+certifi==2026.5.20
     # via requests
 cffi==2.0.0
     # via cryptography
-charset-normalizer==3.4.5
+charset-normalizer==3.4.7
     # via requests
-cryptography==46.0.5
+cryptography==47.0.0
     # via
     #   ansible-core
     #   kolla-ansible
 debtcollector==3.0.0
     # via oslo-utils
 hvac==2.4.0
     # via kolla-ansible
-idna==3.11
+idna==3.18
     # via requests
 importlib-resources==5.0.7
     # via ansible-core
@@ -48,7 +48,7 @@ oslo-i18n==6.6.0
     #   oslo-utils
 oslo-utils==9.1.0
     # via kolla-ansible
-packaging==26.0
+packaging==26.2
     # via
     #   ansible-core
     #   oslo-utils
@@ -85,9 +85,9 @@ stevedore==5.5.0
     # via oslo-config
 typing-extensions==4.15.0
     # via cryptography
-tzdata==2025.3
+tzdata==2026.2
     # via oslo-utils
 urllib3==2.6.3
     # via requests
-wrapt==2.1.2
+wrapt==2.2.1
     # via debtcollector

requirements/2023.2/debian_12.txt

@@ -6,21 +6,19 @@ bcrypt==5.0.0
     # via
     #   kolla-ansible
     #   passlib
-certifi==2026.2.25
+certifi==2026.5.20
     # via requests
 cffi==2.0.0
     # via cryptography
-charset-normalizer==3.4.5
+charset-normalizer==3.4.7
     # via requests
-cryptography==46.0.5
+cryptography==49.0.0
     # via
     #   ansible-core
     #   kolla-ansible
-debtcollector==3.0.0
-    # via oslo-utils
 hvac==2.4.0
     # via kolla-ansible
-idna==3.11
+idna==3.18
     # via requests
 iso8601==2.1.0
     # via oslo-utils
@@ -38,15 +36,15 @@ netaddr==1.3.0
     # via
     #   oslo-config
     #   oslo-utils
-oslo-config==10.3.0
+oslo-config==10.5.0
     # via kolla-ansible
-oslo-i18n==6.7.2
+oslo-i18n==6.8.0
     # via
     #   oslo-config
     #   oslo-utils
-oslo-utils==10.0.0
+oslo-utils==10.1.1
     # via kolla-ansible
-packaging==26.0
+packaging==26.2
     # via
     #   ansible-core
     #   oslo-utils
@@ -69,7 +67,7 @@ pyyaml==6.0.3
     #   kolla-ansible
     #   oslo-config
     #   oslo-utils
-requests==2.32.5
+requests==2.34.2
     # via
     #   hvac
     #   oslo-config
@@ -79,9 +77,7 @@ rfc3986==2.0.0
     # via oslo-config
 setuptools==82.0.1
     # via pbr
-stevedore==5.7.0
+stevedore==5.8.0
     # via oslo-config
-urllib3==2.6.3
+urllib3==2.7.0
     # via requests
-wrapt==2.1.2
-    # via debtcollector