ci: update GitHub Actions to latest versions and fix issues

- ci.yaml:
  - Update actions/checkout from v2 to v4
  - Update actions/setup-go from v3 to v5
  - Update codecov/codecov-action from v2 to v5
  - Fix artifact naming conflict (coverage-frontend, coverage-backend)
  - Remove .zip suffix from artifact names (handled by upload-artifact)

- release-frontend.yaml:
  - Update actions/checkout from v2 to v4
  - Replace deprecated actions/upload-release-asset with softprops/action-gh-release
  - Add explicit permissions for contents:write

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <[email protected]>

Author: Starosdev

.github/workflows/ci.yaml

@@ -8,14 +8,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Test Frontend
         run: |
           make binary-frontend-test-coverage
       - name: Upload coverage
         uses: actions/upload-artifact@v4
         with:
-          name: coverage
+          name: coverage-frontend
           path: ${{ github.workspace }}/webapp/frontend/coverage/lcov.info
           retention-days: 1
   test-backend:
@@ -44,14 +44,14 @@ jobs:
           add-apt-repository ppa:git-core/ppa && apt-get update && apt-get install -y git
           git --version
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       - name: Test Backend
         run: |
           make binary-clean binary-test-coverage
       - name: Upload coverage
         uses: actions/upload-artifact@v4
         with:
-          name: coverage
+          name: coverage-backend
           path: ${{ github.workspace }}/coverage.txt
           retention-days: 1
   test-coverage:
@@ -62,13 +62,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
-      - name: Download coverage reports
+        uses: actions/checkout@v4
+      - name: Download backend coverage
         uses: actions/download-artifact@v4
         with:
-          name: coverage
+          name: coverage-backend
+      - name: Download frontend coverage
+        uses: actions/download-artifact@v4
+        with:
+          name: coverage-frontend
       - name: Upload coverage reports
-        uses: codecov/codecov-action@v2
+        uses: codecov/codecov-action@v5
         with:
           files: ${{ github.workspace }}/coverage.txt,${{ github.workspace }}/lcov.info
           flags: unittests
@@ -98,17 +102,18 @@ jobs:
           - { on: windows-latest, goos: windows,    goarch: arm64 }
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
-      - uses: actions/setup-go@v3
+        uses: actions/checkout@v4
+      - name: Setup Go
+        uses: actions/setup-go@v5
         with:
-          go-version: '^1.20.1'
+          go-version: '1.20'
       - name: Build Binaries
         run: |
           make binary-clean binary-all
       - name: Archive
         uses: actions/upload-artifact@v4
         with:
-          name: binaries-${{ matrix.cfg.on }}-${{ matrix.cfg.goos }}-${{ matrix.cfg.goarch }}-${{ matrix.cfg.goarm || 'na' }}.zip
+          name: binaries-${{ matrix.cfg.on }}-${{ matrix.cfg.goos }}-${{ matrix.cfg.goarch }}-${{ matrix.cfg.goarm || 'na' }}
           path: |
             scrutiny-web-*
             scrutiny-collector-metrics-*

.github/workflows/release-frontend.yaml

@@ -5,30 +5,30 @@ on:
   release:
     # Only use the types keyword to narrow down the activity types that will trigger your workflow.
     types: [published]
+
+permissions:
+  contents: write
+
 jobs:
   release-frontend:
     name: Release Frontend
     runs-on: ubuntu-latest
     container: node:lts-slim
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
-          ref: ${{github.event.release.tag_name}}
-      - name: "Generate frontend version information"
-        run: "cd webapp/frontend && ./git.version.sh"
+          ref: ${{ github.event.release.tag_name }}
+      - name: Generate frontend version information
+        run: cd webapp/frontend && ./git.version.sh
       - name: Build Frontend
         run: |
           apt-get update && apt-get install -y make
           make binary-frontend
           tar -czf scrutiny-web-frontend.tar.gz dist
       - name: Upload Frontend Asset
-        id: upload-release-asset3
-        uses: actions/upload-release-asset@v1
+        uses: softprops/action-gh-release@v2
+        with:
+          files: scrutiny-web-frontend.tar.gz
         env:
           GITHUB_TOKEN: ${{ secrets.SCRUTINY_GITHUB_TOKEN }}
-        with:
-          upload_url: ${{ github.event.release.upload_url }} # This pulls from the CREATE RELEASE step above, referencing it's ID to get its outputs object, which include a `upload_url`. See this blog post for more info: https://jasonet.co/posts/new-features-of-github-actions/#passing-data-to-future-steps
-          asset_path: './scrutiny-web-frontend.tar.gz'
-          asset_name: scrutiny-web-frontend.tar.gz
-          asset_content_type: application/gzip