Bump the github-actions group with 3 updates (#7744)

Bumps the github-actions group with 3 updates: [mhils/workflows](https://github.com/mhils/workflows), [apple-actions/import-codesign-certs](https://github.com/apple-actions/import-codesign-certs) and [docker/build-push-action](https://github.com/docker/build-push-action).


Updates `mhils/workflows` from 0880de3f0d9875bfccf8ddd50c6c991d709bc812 to b71b699e73564a34763a256b9efc8139a5d1c3fd
- [Release notes](https://github.com/mhils/workflows/releases)
- [Commits](0880de3f0d...b71b699e73)

Updates `apple-actions/import-codesign-certs` from 5.0.0 to 5.0.1
- [Release notes](https://github.com/apple-actions/import-codesign-certs/releases)
- [Commits](cfd6eb39a2...835a122d35)

Updates `docker/build-push-action` from 6.16.0 to 6.18.0
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](14487ce63c...263435318d)

---
updated-dependencies:
- dependency-name: mhils/workflows
  dependency-version: b71b699e73564a34763a256b9efc8139a5d1c3fd
  dependency-type: direct:production
  dependency-group: github-actions
- dependency-name: apple-actions/import-codesign-certs
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: docker/build-push-action
  dependency-version: 6.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/autofix.yml

@@ -13,9 +13,9 @@ jobs:
   autofix:
     runs-on: ubuntu-latest
     steps:
-      - uses: mhils/workflows/checkout@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/setup-uv@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/uv-sync@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+      - uses: mhils/workflows/checkout@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/setup-uv@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/uv-sync@b71b699e73564a34763a256b9efc8139a5d1c3fd
 
       - run: ruff check --fix-only .
       - run: ruff format .

.github/workflows/main.yml

@@ -26,9 +26,9 @@ jobs:
     name: ${{ matrix.env }}
     runs-on: ubuntu-latest
     steps:
-      - uses: mhils/workflows/checkout@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/setup-uv@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/uv-sync@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+      - uses: mhils/workflows/checkout@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/setup-uv@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/uv-sync@b71b699e73564a34763a256b9efc8139a5d1c3fd
         with:
           args: --only-group tox
 
@@ -49,9 +49,9 @@ jobs:
             py: "3.12"
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: mhils/workflows/checkout@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/setup-uv@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/uv-sync@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+      - uses: mhils/workflows/checkout@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/setup-uv@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/uv-sync@b71b699e73564a34763a256b9efc8139a5d1c3fd
         with:
           args: --only-group tox
 
@@ -86,15 +86,15 @@ jobs:
         run: |
           apt-get update
           apt-get install --no-install-recommends -y git ca-certificates binutils
-      - uses: mhils/workflows/checkout@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/setup-uv@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/uv-sync@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+      - uses: mhils/workflows/checkout@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/setup-uv@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/uv-sync@b71b699e73564a34763a256b9efc8139a5d1c3fd
       - run: uv pip install .  # pyinstaller 5.9 does not like pyproject.toml + editable installs.
 
       - if: runner.os == 'macOS' && github.repository == 'mitmproxy/mitmproxy'
             && (startsWith(github.ref, 'refs/heads/') || startsWith(github.ref, 'refs/tags/'))
         id: keychain
-        uses: apple-actions/import-codesign-certs@cfd6eb39a2c848ead8836bda6b56813585404ba7
+        uses: apple-actions/import-codesign-certs@835a122d35794a9d0e4219de809dafaa0891fc8f
         with:
           keychain: ${{ runner.temp }}/temp
           p12-file-base64: ${{ secrets.APPLE_CERTIFICATE }}
@@ -122,7 +122,7 @@ jobs:
           path: release/dist
 
   build-wheel:
-    uses: mhils/workflows/.github/workflows/python-build.yml@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+    uses: mhils/workflows/.github/workflows/python-build.yml@b71b699e73564a34763a256b9efc8139a5d1c3fd
     with:
       artifact: binaries.wheel
 
@@ -134,9 +134,9 @@ jobs:
         startsWith(github.ref, 'refs/tags/')
       )
     steps:
-      - uses: mhils/workflows/checkout@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/setup-uv@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/uv-sync@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+      - uses: mhils/workflows/checkout@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/setup-uv@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/uv-sync@b71b699e73564a34763a256b9efc8139a5d1c3fd
       - run: uv pip install .  # pyinstaller 5.9 does not like pyproject.toml + editable installs.
       - run: python -u release/build.py installbuilder-installer msix-installer
         env:
@@ -150,7 +150,7 @@ jobs:
   test-web-ui:
     runs-on: ubuntu-latest
     steps:
-      - uses: mhils/workflows/checkout@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+      - uses: mhils/workflows/checkout@b71b699e73564a34763a256b9efc8139a5d1c3fd
       - uses: actions/setup-node@v4
         with:
           node-version-file: .github/node-version.txt
@@ -176,7 +176,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: build-wheel
     steps:
-      - uses: mhils/workflows/checkout@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+      - uses: mhils/workflows/checkout@b71b699e73564a34763a256b9efc8139a5d1c3fd
       - uses: actions/download-artifact@v4
         with:
           name: binaries.wheel
@@ -189,9 +189,9 @@ jobs:
   docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: mhils/workflows/checkout@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/setup-uv@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/uv-sync@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+      - uses: mhils/workflows/checkout@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/setup-uv@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/uv-sync@b71b699e73564a34763a256b9efc8139a5d1c3fd
       - run: |
           wget -q https://github.com/gohugoio/hugo/releases/download/v0.139.3/hugo_extended_0.139.3_linux-amd64.deb
           echo "3e58800d1fee57269208d07d104ae1a6ab886615344099f2dca0c6ad5279bc11 hugo_extended_0.139.3_linux-amd64.deb" | sha256sum -c
@@ -223,7 +223,7 @@ jobs:
     - build-wheel
     - build-windows-installer
     - docs
-    uses: mhils/workflows/.github/workflows/alls-green.yml@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+    uses: mhils/workflows/.github/workflows/alls-green.yml@b71b699e73564a34763a256b9efc8139a5d1c3fd
     with:
       jobs: ${{ toJSON(needs) }}
       allowed-skips: build-windows-installer
@@ -243,7 +243,7 @@ jobs:
     needs: check
     runs-on: ubuntu-latest
     steps:
-      - uses: mhils/workflows/checkout@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+      - uses: mhils/workflows/checkout@b71b699e73564a34763a256b9efc8139a5d1c3fd
       - uses: actions/download-artifact@v4
         with:
           name: binaries.wheel
@@ -281,7 +281,7 @@ jobs:
 
       - name: Build and push
         id: push
-        uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
+        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
         with:
           context: release/docker
           platforms: linux/amd64,linux/arm64
@@ -321,9 +321,9 @@ jobs:
       R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }}
       R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
     steps:
-      - uses: mhils/workflows/checkout@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/setup-uv@0880de3f0d9875bfccf8ddd50c6c991d709bc812
-      - uses: mhils/workflows/uv-sync@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+      - uses: mhils/workflows/checkout@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/setup-uv@b71b699e73564a34763a256b9efc8139a5d1c3fd
+      - uses: mhils/workflows/uv-sync@b71b699e73564a34763a256b9efc8139a5d1c3fd
         with:
           args: --only-group deploy
 

.github/workflows/release.yml

@@ -28,7 +28,7 @@ jobs:
       - uses: actions/setup-node@v4
         with:
           node-version-file: .github/node-version.txt
-      - uses: mhils/workflows/setup-python@0880de3f0d9875bfccf8ddd50c6c991d709bc812
+      - uses: mhils/workflows/setup-python@b71b699e73564a34763a256b9efc8139a5d1c3fd
       - run: ./release/release.py ${{ inputs.version }} ${{ inputs.skip-branch-status-check }}
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}  # this token works with the GraphQL API