chore(deps): update all non-major dependencies

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/golicenses.yaml

@@ -11,7 +11,7 @@ jobs:
   golicenses:
     runs-on: [self-hosted, Linux, X64, validator]
     container:
-      image: us-docker.pkg.dev/palette-images/build-base-images/golang:1.23-alpine
+      image: us-docker.pkg.dev/palette-images/build-base-images/golang:1.25-alpine
     steps:
       - name: checkout
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4

.github/workflows/govulncheck.yaml

@@ -12,7 +12,7 @@ jobs:
   govulncheck:
     runs-on: [self-hosted, Linux, X64, validator]
     container:
-      image: us-docker.pkg.dev/palette-images/build-base-images/golang:1.23-alpine
+      image: us-docker.pkg.dev/palette-images/build-base-images/golang:1.25-alpine
     steps:
       - name: install-govulncheck
         run: GOBIN=/usr/local/bin go install golang.org/x/vuln/cmd/govulncheck@latest

.github/workflows/release.yaml

@@ -103,7 +103,7 @@ jobs:
           cache-to: type=gha,scope=${{ github.ref_name }}-${{ env.IMAGE_TAG }}
 
       - name: Generate SBOM
-        uses: anchore/sbom-action@55dc4ee22412511ee8c3142cbea40418e6cec693 # v0.17.8
+        uses: anchore/sbom-action@43a17d6e7add2b5535efe4dcae9952337c479a93 # v0.20.11
         with:
           image: ${{ env.IMAGE_TAG }}
           artifact-name: sbom-${{ env.IMAGE_NAME }}

.github/workflows/test.yaml

@@ -29,7 +29,7 @@ jobs:
 
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
-          python-version: '3.9'
+          python-version: '3.14'
           check-latest: true
 
       - name: Set up frigate
@@ -77,11 +77,11 @@ jobs:
 
       - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
         with:
-          python-version: '3.9'
+          python-version: '3.14'
           check-latest: true
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@e6669bcd63d7cb57cb4380c33043eebe5d111992 # v2.6.1
+        uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0
 
       - name: Set up Docker Buildx
         id: buildx
@@ -112,7 +112,7 @@ jobs:
 
       - name: Create kind cluster
         if: steps.list-changed.outputs.changed == 'true'
-        uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde # v1.10.0
+        uses: helm/kind-action@92086f6be054225fa813e0a4b13787fc9088faab # v1.13.0
         with:
           cluster_name: ct-${{ steps.short-sha.outputs.sha }}