Merge pull request #175 from advanced-security/dependabot/github_actions/main/production-dependencies-aff0d92867

deps: bump the production-dependencies group across 1 directory with 3 updates

Author: aegilops

.github/workflows/check-dist.yml

@@ -21,10 +21,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
 
       - name: Set Node.js 16.x
-        uses: actions/setup-node@v4.3.0
+        uses: actions/setup-node@v6.0.0
         with:
           node-version: 16.x
 
@@ -46,7 +46,7 @@ jobs:
         id: diff
 
       # If index.js was different than expected, upload the expected version as an artifact
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v5
         if: ${{ failure() && steps.diff.conclusion == 'failure' }}
         with:
           name: dist

.github/workflows/test.yml

@@ -11,15 +11,15 @@ jobs:
   build: # make sure build/ci work properly
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - run: |
           npm install
       - run: |
           npm run all
   test: # make sure the action works on a clean machine without building
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - name: Run action
         uses: ./
         with:
@@ -35,7 +35,7 @@ jobs:
         with:
           sarifFile: test-data/webgoat1.sarif
       - name: Archive SARIF output
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: sarif-output
           path: test-data/webgoat-with-security-standard-tag.sarif