deps: bump the github-actions group with 4 updates

[dependabot]

Bumps the github-actions group with 4 updates: equinor/ops-actions/.github/workflows/zizmor-codeql.yml, equinor/ops-actions/.github/workflows/commitlint.yml, equinor/ops-actions/.github/workflows/release-please-manifest.yml and astral-sh/setup-uv.

Updates equinor/ops-actions/.github/workflows/zizmor-codeql.yml from 9.36.0 to 9.37.1

Release notes

Sourced from equinor/ops-actions/.github/workflows/zizmor-codeql.yml's releases.

v9.37.1

9.37.1 (2026-04-16)

Bug Fixes

• release-please-manifest: multiline value for output path_tag_names throws error (#984) (fcdb1d9)

Dependencies

• bump azure/functions-action from 1.5.4 to 1.5.5 (#982) (479a817)
• bump azure/webapps-deploy from 3.0.7 to 3.0.8 (#979) (2b175d6)
• bump github/codeql-action from 4.31.10 to 4.35.1 (#981) (5b367c3)
• bump googleapis/release-please-action from 4.4.0 to 4.4.1 (#978) (225a9e1)
• bump super-linter/super-linter from 8.5.0 to 8.6.0 (#980) (c6b9223)

v9.37.0

9.37.0 (2026-04-13)

Features

• terraform: skip environment reference if triggered by Dependabot (#975) (7fb51e9)

Changelog

Sourced from equinor/ops-actions/.github/workflows/zizmor-codeql.yml's changelog.

Changelog

9.37.2 (2026-04-21)

Dependencies

• bump actions/cache from 5.0.4 to 5.0.5 (#985) (a93d046)
• bump actions/upload-artifact from 7.0.0 to 7.0.1 (#987) (57973ab)
• bump azure/functions-action from 1.5.5 to 1.5.6 (#988) (f2f0a7e)
• bump databricks/setup-cli from 0.295.0 to 0.296.0 (#986) (f0167fa)
• bump databricks/setup-cli from 0.296.0 to 0.296.1 (#991) (f95554b)
• bump docker/login-action from 4.0.0 to 4.1.0 (#989) (ef8680c)

9.37.1 (2026-04-16)

Bug Fixes

• release-please-manifest: multiline value for output path_tag_names throws error (#984) (fcdb1d9)

Dependencies

• bump azure/functions-action from 1.5.4 to 1.5.5 (#982) (479a817)
• bump azure/webapps-deploy from 3.0.7 to 3.0.8 (#979) (2b175d6)
• bump github/codeql-action from 4.31.10 to 4.35.1 (#981) (5b367c3)
• bump googleapis/release-please-action from 4.4.0 to 4.4.1 (#978) (225a9e1)
• bump super-linter/super-linter from 8.5.0 to 8.6.0 (#980) (c6b9223)

9.37.0 (2026-04-13)

Features

• terraform: skip environment reference if triggered by Dependabot (#975) (7fb51e9)

9.36.0 (2026-04-07)

Features

• add input build_args to docker workflows (#971) (55d7c20)
• add input tag_latest to docker workflows (#972) (8df41e1)

Dependencies

• bump actions/cache from 5.0.3 to 5.0.4 (#969) (62a7977)
• bump actions/deploy-pages from 4.0.5 to 5.0.0 (#974) (81022b1)

... (truncated)

Commits

• 39749d0 chore: release 9.37.1 (#983)
• fcdb1d9 fix(release-please-manifest): multiline value for output path_tag_names thr...
• 225a9e1 deps: bump googleapis/release-please-action from 4.4.0 to 4.4.1 (#978)
• 2b175d6 deps: bump azure/webapps-deploy from 3.0.7 to 3.0.8 (#979)
• c6b9223 deps: bump super-linter/super-linter from 8.5.0 to 8.6.0 (#980)
• 5b367c3 deps: bump github/codeql-action from 4.31.10 to 4.35.1 (#981)
• 479a817 deps: bump azure/functions-action from 1.5.4 to 1.5.5 (#982)
• e5aa8af chore: release 9.37.0 (#977)
• a11d371 docs(zizmor-codeql): add zizmor section to README.md (#976)
• 7fb51e9 feat(terraform): skip environment reference if triggered by Dependabot (#975)
• See full diff in compare view

Updates equinor/ops-actions/.github/workflows/commitlint.yml from 9.36.0 to 9.37.1

Release notes

Sourced from equinor/ops-actions/.github/workflows/commitlint.yml's releases.

v9.37.1

9.37.1 (2026-04-16)

Bug Fixes

• release-please-manifest: multiline value for output path_tag_names throws error (#984) (fcdb1d9)

Dependencies

• bump azure/functions-action from 1.5.4 to 1.5.5 (#982) (479a817)
• bump azure/webapps-deploy from 3.0.7 to 3.0.8 (#979) (2b175d6)
• bump github/codeql-action from 4.31.10 to 4.35.1 (#981) (5b367c3)
• bump googleapis/release-please-action from 4.4.0 to 4.4.1 (#978) (225a9e1)
• bump super-linter/super-linter from 8.5.0 to 8.6.0 (#980) (c6b9223)

v9.37.0

9.37.0 (2026-04-13)

Features

• terraform: skip environment reference if triggered by Dependabot (#975) (7fb51e9)

Changelog

Sourced from equinor/ops-actions/.github/workflows/commitlint.yml's changelog.

Changelog

9.37.2 (2026-04-21)

Dependencies

• bump actions/cache from 5.0.4 to 5.0.5 (#985) (a93d046)
• bump actions/upload-artifact from 7.0.0 to 7.0.1 (#987) (57973ab)
• bump azure/functions-action from 1.5.5 to 1.5.6 (#988) (f2f0a7e)
• bump databricks/setup-cli from 0.295.0 to 0.296.0 (#986) (f0167fa)
• bump databricks/setup-cli from 0.296.0 to 0.296.1 (#991) (f95554b)
• bump docker/login-action from 4.0.0 to 4.1.0 (#989) (ef8680c)

9.37.1 (2026-04-16)

Bug Fixes

• release-please-manifest: multiline value for output path_tag_names throws error (#984) (fcdb1d9)

Dependencies

• bump azure/functions-action from 1.5.4 to 1.5.5 (#982) (479a817)
• bump azure/webapps-deploy from 3.0.7 to 3.0.8 (#979) (2b175d6)
• bump github/codeql-action from 4.31.10 to 4.35.1 (#981) (5b367c3)
• bump googleapis/release-please-action from 4.4.0 to 4.4.1 (#978) (225a9e1)
• bump super-linter/super-linter from 8.5.0 to 8.6.0 (#980) (c6b9223)

9.37.0 (2026-04-13)

Features

• terraform: skip environment reference if triggered by Dependabot (#975) (7fb51e9)

9.36.0 (2026-04-07)

Features

• add input build_args to docker workflows (#971) (55d7c20)
• add input tag_latest to docker workflows (#972) (8df41e1)

Dependencies

• bump actions/cache from 5.0.3 to 5.0.4 (#969) (62a7977)
• bump actions/deploy-pages from 4.0.5 to 5.0.0 (#974) (81022b1)

... (truncated)

Commits

• 39749d0 chore: release 9.37.1 (#983)
• fcdb1d9 fix(release-please-manifest): multiline value for output path_tag_names thr...
• 225a9e1 deps: bump googleapis/release-please-action from 4.4.0 to 4.4.1 (#978)
• 2b175d6 deps: bump azure/webapps-deploy from 3.0.7 to 3.0.8 (#979)
• c6b9223 deps: bump super-linter/super-linter from 8.5.0 to 8.6.0 (#980)
• 5b367c3 deps: bump github/codeql-action from 4.31.10 to 4.35.1 (#981)
• 479a817 deps: bump azure/functions-action from 1.5.4 to 1.5.5 (#982)
• e5aa8af chore: release 9.37.0 (#977)
• a11d371 docs(zizmor-codeql): add zizmor section to README.md (#976)
• 7fb51e9 feat(terraform): skip environment reference if triggered by Dependabot (#975)
• See full diff in compare view

Updates equinor/ops-actions/.github/workflows/release-please-manifest.yml from 9.36.0 to 9.37.1

Release notes

Sourced from equinor/ops-actions/.github/workflows/release-please-manifest.yml's releases.

v9.37.1

9.37.1 (2026-04-16)

Bug Fixes

• release-please-manifest: multiline value for output path_tag_names throws error (#984) (fcdb1d9)

Dependencies

• bump azure/functions-action from 1.5.4 to 1.5.5 (#982) (479a817)
• bump azure/webapps-deploy from 3.0.7 to 3.0.8 (#979) (2b175d6)
• bump github/codeql-action from 4.31.10 to 4.35.1 (#981) (5b367c3)
• bump googleapis/release-please-action from 4.4.0 to 4.4.1 (#978) (225a9e1)
• bump super-linter/super-linter from 8.5.0 to 8.6.0 (#980) (c6b9223)

v9.37.0

9.37.0 (2026-04-13)

Features

• terraform: skip environment reference if triggered by Dependabot (#975) (7fb51e9)

Changelog

Sourced from equinor/ops-actions/.github/workflows/release-please-manifest.yml's changelog.

Changelog

9.37.2 (2026-04-21)

Dependencies

• bump actions/cache from 5.0.4 to 5.0.5 (#985) (a93d046)
• bump actions/upload-artifact from 7.0.0 to 7.0.1 (#987) (57973ab)
• bump azure/functions-action from 1.5.5 to 1.5.6 (#988) (f2f0a7e)
• bump databricks/setup-cli from 0.295.0 to 0.296.0 (#986) (f0167fa)
• bump databricks/setup-cli from 0.296.0 to 0.296.1 (#991) (f95554b)
• bump docker/login-action from 4.0.0 to 4.1.0 (#989) (ef8680c)

9.37.1 (2026-04-16)

Bug Fixes

• release-please-manifest: multiline value for output path_tag_names throws error (#984) (fcdb1d9)

Dependencies

• bump azure/functions-action from 1.5.4 to 1.5.5 (#982) (479a817)
• bump azure/webapps-deploy from 3.0.7 to 3.0.8 (#979) (2b175d6)
• bump github/codeql-action from 4.31.10 to 4.35.1 (#981) (5b367c3)
• bump googleapis/release-please-action from 4.4.0 to 4.4.1 (#978) (225a9e1)
• bump super-linter/super-linter from 8.5.0 to 8.6.0 (#980) (c6b9223)

9.37.0 (2026-04-13)

Features

• terraform: skip environment reference if triggered by Dependabot (#975) (7fb51e9)

9.36.0 (2026-04-07)

Features

• add input build_args to docker workflows (#971) (55d7c20)
• add input tag_latest to docker workflows (#972) (8df41e1)

Dependencies

• bump actions/cache from 5.0.3 to 5.0.4 (#969) (62a7977)
• bump actions/deploy-pages from 4.0.5 to 5.0.0 (#974) (81022b1)

... (truncated)

Commits

• 39749d0 chore: release 9.37.1 (#983)
• fcdb1d9 fix(release-please-manifest): multiline value for output path_tag_names thr...
• 225a9e1 deps: bump googleapis/release-please-action from 4.4.0 to 4.4.1 (#978)
• 2b175d6 deps: bump azure/webapps-deploy from 3.0.7 to 3.0.8 (#979)
• c6b9223 deps: bump super-linter/super-linter from 8.5.0 to 8.6.0 (#980)
• 5b367c3 deps: bump github/codeql-action from 4.31.10 to 4.35.1 (#981)
• 479a817 deps: bump azure/functions-action from 1.5.4 to 1.5.5 (#982)
• e5aa8af chore: release 9.37.0 (#977)
• a11d371 docs(zizmor-codeql): add zizmor section to README.md (#976)
• 7fb51e9 feat(terraform): skip environment reference if triggered by Dependabot (#975)
• See full diff in compare view

Updates astral-sh/setup-uv from 8.0.0 to 8.1.0

Release notes

Sourced from astral-sh/setup-uv's releases.

v8.1.0 🌈 New input no-project

Changes

This add the a new boolean input no-project. It only makes sense to use in combination with activate-environment: true and will append --no project to the uv venv call. This is for example useful if you have a pyproject.toml file with parts unparseable by uv

🚀 Enhancements

• Add input no-project in combination with activate-environment @​eifinger (#856)

🧰 Maintenance

• fix: grant contents:write to validate-release job @​eifinger (#860)
• Add a release-gate step to the release workflow @​zanieb (#859)
• Draft commitish releases @​eifinger (#858)
• Add action-types.yml to instructions @​eifinger (#857)
• chore: update known checksums for 0.11.7 @github-actions[bot] (#853)
• Refactor version resolving @​eifinger (#852)
• chore: update known checksums for 0.11.6 @github-actions[bot] (#850)
• chore: update known checksums for 0.11.5 @github-actions[bot] (#845)
• chore: update known checksums for 0.11.4 @github-actions[bot] (#843)
• Add a release workflow @​zanieb (#839)
• chore: update known checksums for 0.11.3 @github-actions[bot] (#836)

📚 Documentation

• Update ignore-nothing-to-cache documentation @​eifinger (#833)
• Pin setup-uv docs to v8 @​eifinger (#829)

⬆️ Dependency updates

• chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 @dependabot[bot] (#855)

Commits

• 0880764 fix: grant contents:write to validate-release job (#860)
• 717d6ab Add a release-gate step to the release workflow (#859)
• 5a911eb Draft commitish releases (#858)
• 080c31e Add action-types.yml to instructions (#857)
• b3e97d2 Add input no-project in combination with activate-environment (#856)
• 7dd591d chore(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 (#855)
• 1541b77 chore: update known checksums for 0.11.7 (#853)
• cdfb2ee Refactor version resolving (#852)
• cb84d12 chore: update known checksums for 0.11.6 (#850)
• 1912cc6 chore: update known checksums for 0.11.5 (#845)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions