chore(deps): bump the github-actions group across 1 directory with 4 updates (#386)

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/docker.yml

@@ -31,7 +31,7 @@ jobs:
           fi
 
       - name: Build and Push to Docker Hub
-        uses: grafana/shared-workflows/actions/build-push-to-dockerhub@60fadd1458bb20b97f00618568c22ed1c7d485bd
+        uses: grafana/shared-workflows/actions/build-push-to-dockerhub@2dd0b0349e130ca5ccf86b3a61250589a840bdb2
         with:
           context: .
           file: ./Dockerfile

.github/workflows/e2e.yml

@@ -44,15 +44,15 @@ jobs:
           uv sync --all-groups
 
       - id: get-secrets
-        uses: grafana/shared-workflows/actions/get-vault-secrets@5d7e361bc7e0a183cde8afe9899fb7b596d2659b # get-vault-secrets-v1.2.0
+        uses: grafana/shared-workflows/actions/get-vault-secrets@2dd0b0349e130ca5ccf86b3a61250589a840bdb2 # get-vault-secrets-v1.2.0
         with:
           # Secrets placed in the ci/repo/grafana/mcp-grafana/<path> path in Vault
           repo_secrets: |
             ANTHROPIC_API_KEY=anthropic:api-key
             OPENAI_API_KEY=openai:api-key
 
       - name: Start docker-compose services
-        uses: hoverkraft-tech/compose-action@ccd64b05f85e42d4fa426d34ecb5884c99537eb4
+        uses: hoverkraft-tech/compose-action@2c655a3602eeee00c12d1f4edd41f7af43baf2e9
         with:
           compose-file: "docker-compose.yaml"
 

.github/workflows/integration.yml

@@ -24,7 +24,7 @@ jobs:
       # Do this early so that it can start up in time for the tests to run.
       # We may need to add a wait here.
       - name: Start docker-compose services
-        uses: hoverkraft-tech/compose-action@ccd64b05f85e42d4fa426d34ecb5884c99537eb4
+        uses: hoverkraft-tech/compose-action@2c655a3602eeee00c12d1f4edd41f7af43baf2e9
         with:
           compose-file: "docker-compose.yaml"
 
@@ -60,7 +60,7 @@ jobs:
           cache: true
 
       - id: get-secrets
-        uses: grafana/shared-workflows/actions/get-vault-secrets@5d7e361bc7e0a183cde8afe9899fb7b596d2659b # get-vault-secrets-v1.2.0
+        uses: grafana/shared-workflows/actions/get-vault-secrets@2dd0b0349e130ca5ccf86b3a61250589a840bdb2 # get-vault-secrets-v1.2.0
         with:
           # Secrets placed in the ci/repo/grafana/mcp-grafana/<path> path in Vault
           repo_secrets: |

.github/workflows/release.yml

@@ -27,7 +27,7 @@ jobs:
           cache: false
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@a08664b80c0ab417b1babcbf750274aed2018fef
+        uses: goreleaser/goreleaser-action@9cf36111e7ea38bea30119371229bf9ad8028289
         with:
           distribution: goreleaser
           # 'latest', 'nightly', or a semver

.github/workflows/unit.yml

@@ -42,7 +42,7 @@ jobs:
           go-version: "1.24"
           cache: true
       - name: Run golangci-lint
-        uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8.0.0
+        uses: golangci/golangci-lint-action@0a35821d5c230e903fcfe077583637dea1b27b47 # v9.0.0
         with:
           version: v2.3.0