fix: resolve dependabot alerts and bump CI actions

.github/workflows/auto-close.yml

@@ -36,7 +36,7 @@ jobs:
             dry_run: 'false'
     steps:
       - name: Validate and process ${{ matrix.label }}
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         env:
           LABEL_NAME: ${{ matrix.label }}
           DAYS_TO_WAIT: ${{ matrix.days }}

.github/workflows/auto-strands-review.yml

@@ -35,7 +35,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Trigger Strands Command Workflow
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |

.github/workflows/ci.yml

@@ -23,7 +23,7 @@ jobs:
       docs: ${{ steps.filter.outputs.docs }}
     steps:
       - uses: actions/checkout@v6
-      - uses: dorny/paths-filter@v3
+      - uses: dorny/paths-filter@v4
         id: filter
         with:
           filters: |

.github/workflows/docs-deploy-preview.yml

@@ -107,7 +107,7 @@ jobs:
 
       - name: Comment on PR (success)
         if: success()
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const prNumber = context.payload.pull_request.number;
@@ -153,7 +153,7 @@ jobs:
 
       - name: Comment on PR (failure)
         if: failure()
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const prNumber = context.payload.pull_request.number;

.github/workflows/pr-size-labeler.yml

@@ -12,7 +12,7 @@ jobs:
       issues: write
     steps:
       - name: Calculate PR size and apply label
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const pr = context.payload.pull_request;

.github/workflows/python-check-markdown-links.yml

@@ -9,7 +9,7 @@ jobs:
   check-links:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: gaurav-nelson/github-action-markdown-link-check@3c3b66f1f7d0900e37b71eca45b63ea9eedfce31 # v1.0.17
         id: link-check
@@ -22,7 +22,7 @@ jobs:
 
       - name: Create issue if links are broken
         if: steps.link-check.outcome == 'failure'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const title = '🔗 Broken markdown links detected';

.github/workflows/python-test-lint.yml

@@ -101,7 +101,7 @@ jobs:
         continue-on-error: false
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v6
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
   lint: