Release/2025-12-17

.github/workflows/_deploy.yml

@@ -52,7 +52,7 @@ jobs:
     runs-on: [self-hosted, ci]
     needs: get-branch-from-workflow-file
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - if: ${{ env.SCOPE == 'per_workspace'}}
@@ -81,7 +81,7 @@ jobs:
     needs: [get-branch-from-workflow-file, build]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - uses: ./.github/actions/terraform/
@@ -98,7 +98,7 @@ jobs:
     needs: [get-branch-from-workflow-file, terraform--init]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - uses: ./.github/actions/terraform/
@@ -116,7 +116,7 @@ jobs:
     environment: ${{ inputs.account }}
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - uses: ./.github/actions/terraform/
@@ -133,7 +133,7 @@ jobs:
     needs: [get-branch-from-workflow-file, terraform--apply]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - uses: ./.github/actions/make/
@@ -144,7 +144,7 @@ jobs:
           restore-from-cache: "true"
           cache-suffix: ${{ env.CACHE_NAME }}
       - name: Archive swagger
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: swagger
           path: |
@@ -157,7 +157,7 @@ jobs:
     needs: [get-branch-from-workflow-file, apigee--deploy]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - if: ${{ env.SCOPE == 'per_workspace' && (env.ACCOUNT == 'int' || env.ACCOUNT == 'prod') }}
@@ -172,7 +172,7 @@ jobs:
     needs: [get-branch-from-workflow-file, apigee--deploy]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - if: ${{ env.ACCOUNT != 'mgmt' && env.ACCOUNT != 'backups' }}

.github/workflows/_deploy_backups.yml

@@ -51,7 +51,7 @@ jobs:
     runs-on: [self-hosted, ci]
     needs: get-branch-from-workflow-file
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - if: ${{ env.SCOPE == 'per_workspace'}}
@@ -73,7 +73,7 @@ jobs:
     needs: [get-branch-from-workflow-file, build]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - uses: ./.github/actions/terraform/
@@ -90,7 +90,7 @@ jobs:
     needs: [get-branch-from-workflow-file, terraform--init]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - uses: ./.github/actions/terraform/
@@ -108,7 +108,7 @@ jobs:
     environment: ${{ inputs.account }}
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - uses: ./.github/actions/terraform/

.github/workflows/destroy-expired-workspaces.yml

@@ -28,7 +28,7 @@ jobs:
     runs-on: [self-hosted, ci]
     needs: [parse-secrets]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/make/
@@ -42,7 +42,7 @@ jobs:
     needs: [build-base]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
 

.github/workflows/destroy-nonprod-workspace.yml

@@ -41,7 +41,7 @@ jobs:
     runs-on: [self-hosted, ci]
     needs: [get-branch-from-workflow-file]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - uses: ./.github/actions/make/
@@ -55,7 +55,7 @@ jobs:
     needs: [build-base]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ needs.get-branch-from-workflow-file.outputs.branch_name }}
       - name: Destroy workspace

.github/workflows/merge.yml

@@ -17,7 +17,7 @@ jobs:
     name: Create a tag from main
     steps:
       - name: Checkout the repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Create 'env.tag' from the latest release
         run: |
           TAG=$(make changelog--get-latest-release)
@@ -51,7 +51,7 @@ jobs:
     runs-on: [self-hosted, ci]
     needs: [create-coverage-name, make-tag]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: main
       - name: Download artifact
@@ -62,7 +62,7 @@ jobs:
           workflow: pull-requests.yml
           workflow_conclusion: success
       - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@v5
+        uses: SonarSource/sonarqube-scan-action@v7
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
           SONAR_HOST_URL: https://sonarcloud.io

.github/workflows/on-pr-close.yml

@@ -28,13 +28,13 @@ jobs:
     steps:
       - name: Checkout Branch
         id: checkout-build-branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         continue-on-error: true
         with:
           ref: ${{ env.BRANCH_NAME }}
       - name: Fallback to main
         if: steps.checkout-build-branch.outcome == 'failure'
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: main
       - uses: ./.github/actions/make/
@@ -49,13 +49,13 @@ jobs:
     steps:
       - name: Checkout Branch for destroy
         id: checkout-destroy-branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         continue-on-error: true
         with:
           ref: ${{ env.BRANCH_NAME }}
       - name: Fallback to main for destroy
         if: steps.checkout-destroy-branch.outcome == 'failure'
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: main
           fetch-depth: 0

.github/workflows/pull-requests.yml

@@ -20,7 +20,7 @@ jobs:
   workflow--check--branch-name:
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/make/
@@ -30,7 +30,7 @@ jobs:
   workflow--check--rebased-on-main:
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0
       - uses: ./.github/actions/make/
@@ -40,7 +40,7 @@ jobs:
   workflow--check--release-branch-name:
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.ref }}
       - uses: ./.github/actions/make/
@@ -76,7 +76,7 @@ jobs:
     runs-on: [self-hosted, ci]
     needs: [parse-secrets]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/make/
@@ -89,7 +89,7 @@ jobs:
     runs-on: [self-hosted, ci]
     needs: [workflow--check--branch-name]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BASE_BRANCH_NAME }}
       - uses: ./.github/actions/make/
@@ -103,7 +103,7 @@ jobs:
     runs-on: [self-hosted, ci]
     needs: [build-head]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/make/
@@ -117,7 +117,7 @@ jobs:
       matrix:
         test-type: [unit, slow]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/pytest-with-rerun/
@@ -128,7 +128,7 @@ jobs:
     needs: [build-head]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/make/
@@ -139,7 +139,7 @@ jobs:
     needs: [create-workspace-name, build-base, parse-secrets]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BASE_BRANCH_NAME }}
       - uses: ./.github/actions/terraform/
@@ -168,7 +168,7 @@ jobs:
       ]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/terraform/
@@ -186,7 +186,7 @@ jobs:
     needs: [build-head, terraform-head-build]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/make/
@@ -200,7 +200,7 @@ jobs:
     needs: [build-head, apigee--deploy]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - run: |
@@ -227,7 +227,7 @@ jobs:
       matrix:
         test-type: [integration]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/pytest-with-rerun/
@@ -247,7 +247,7 @@ jobs:
       ]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/make/
@@ -270,7 +270,7 @@ jobs:
       ]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/make/
@@ -305,7 +305,7 @@ jobs:
       ]
     runs-on: [self-hosted, ci]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/make/
@@ -314,12 +314,12 @@ jobs:
           requires-aws: true
           save-to-cache: "true"
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: "${{ needs.create-coverage-name.outputs.coverage-name }}-coverage"
           path: "sonarcloud-coverage.xml"
       - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@v5
+        uses: SonarSource/sonarqube-scan-action@v7
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
           SONAR_HOST_URL: https://sonarcloud.io
@@ -335,7 +335,7 @@ jobs:
     runs-on: [self-hosted, ci]
     if: ${{ needs.apigee--attach-product.result == 'success' }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - run: |
@@ -352,7 +352,7 @@ jobs:
     runs-on: [self-hosted, ci]
     if: ${{ needs.apigee--deploy.result == 'success' }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
       - uses: ./.github/actions/make/
@@ -366,7 +366,7 @@ jobs:
     runs-on: [self-hosted, ci]
     needs: [build-head]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           ref: ${{ env.BRANCH_NAME }}
           fetch-depth: 0