chore(deps): update github actions

Author: renovate[bot]

.github/workflows/.deploy.yml

@@ -120,7 +120,7 @@ jobs:
 
       - name: Stop pre-existing deployments on PRs (status = pending-upgrade)
         if: github.event_name == 'pull_request'
-        uses: bcgov/action-oc-runner@10033668ef4374d9bb78149faa73e4ccda0e93dd # v1.2.3
+        uses: bcgov/action-oc-runner@f900830adadd4d9eef3ca6ff80103e839ba8b7c0 # v1.3.0
         with:
           oc_namespace: ${{ secrets.oc_namespace }}
           oc_token: ${{ secrets.oc_token }}
@@ -141,7 +141,7 @@ jobs:
         run: ls -l charts/crunchy/values.yml
       - name: Helm Deploy
         id: deploy
-        uses: bcgov/action-oc-runner@10033668ef4374d9bb78149faa73e4ccda0e93dd # v1.2.3
+        uses: bcgov/action-oc-runner@f900830adadd4d9eef3ca6ff80103e839ba8b7c0 # v1.3.0
         with:
           oc_namespace: ${{ secrets.oc_namespace }}
           oc_token: ${{ secrets.oc_token }}

.github/workflows/analysis.yml

@@ -100,7 +100,7 @@ jobs:
       - uses: actions/checkout@v5
       - uses: actions/setup-python@v6
         with:
-          python-version: "3.13"
+          python-version: "3.14"
 
       - name: Install UV
         run: curl -LsSf https://astral.sh/uv/install.sh | sh

.github/workflows/pentests.yml

@@ -20,7 +20,7 @@ jobs:
         name: [backendGo, backendJava, backendPy]
     steps:
       - name: ZAP Scan
-        uses: zaproxy/action-full-scan@75ee1686750ab1511a73b26b77a2aedd295053ed # v0.12.0
+        uses: zaproxy/action-full-scan@3c58388149901b9a03b7718852c5ba889646c27c # v0.13.0
         with:
           allow_issue_writing: true
           artifact_name: "zap_${{ matrix.name }}"

.github/workflows/pr-open.yml

@@ -35,7 +35,7 @@ jobs:
             triggers: ('backend-py/db')
             build_context: ./backend-py/db
     steps:
-      - uses: bcgov/action-builder-ghcr@1e4295b9766963ca36612b78560db6235120b80f # 4.1.1
+      - uses: bcgov/action-builder-ghcr@2b24ac7f95e6a019064151498660437cca3202c5 # v4.2.1
         id: builds
         with:
           build_context: ${{ matrix.build_context }}