build(deps): bump spring-boot.version from 4.0.0 to 4.0.6 in /services

Bumps `spring-boot.version` from 4.0.0 to 4.0.6.

Updates `org.springframework.boot:spring-boot-dependencies` from 4.0.0 to 4.0.6
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v4.0.0...v4.0.6)

Updates `org.springframework.boot:spring-boot-maven-plugin` from 4.0.0 to 4.0.6
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](https://github.com/spring-projects/spring-boot/compare/v4.0.0...v4.0.6)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-dependencies
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
  dependency-version: 4.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/ci-java.yml

@@ -10,7 +10,7 @@ jobs:
   maven:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
       - uses: actions/setup-java@v4
         with:
           distribution: temurin

.github/workflows/ci-native.yml

@@ -14,7 +14,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
       - name: Set up JDK (JNI)
         uses: actions/setup-java@v4
         with:

.github/workflows/ci-platform.yml

@@ -20,7 +20,7 @@ jobs:
   maven-services:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
       - uses: actions/setup-java@v4
         with:
           distribution: temurin
@@ -41,7 +41,7 @@ jobs:
   web-ui-build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           node-version: "20"

.github/workflows/ci-security.yml

@@ -20,7 +20,7 @@ jobs:
           - scan-ref: services
           - scan-ref: java
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
       - name: Run Trivy filesystem scan
         uses: aquasecurity/trivy-action@0.28.0
         with:
@@ -41,7 +41,7 @@ jobs:
       run:
         working-directory: web/delivery-platform-ui
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
       - uses: actions/setup-node@v4
         with:
           node-version: "20"

.github/workflows/release.yml

@@ -9,7 +9,7 @@ jobs:
   placeholder:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
       - name: Tag pushed
         run: |
           echo "Release workflow placeholder — attach native ZIP & Maven publish in later milestone."

.github/workflows/sdk-release-checksums.yml

@@ -8,7 +8,7 @@ jobs:
   checksums:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v4
       - uses: actions/setup-java@v4
         with:
           distribution: temurin

services/pom.xml

@@ -18,7 +18,7 @@
 
     <properties>
         <java.version>17</java.version>
-        <spring-boot.version>4.0.0</spring-boot.version>
+        <spring-boot.version>4.0.6</spring-boot.version>
         <!-- 平台数据访问：PostgreSQL 15 + MyBatis-Plus（Spring Boot 4 用 boot4-starter） -->
         <mybatis-plus.version>3.5.15</mybatis-plus.version>
     </properties>