ci(deps): update github actions (major)

.github/workflows/astarte-apps-build-workflow.yaml

@@ -17,7 +17,7 @@ on:
 jobs:
   warmup:
     name: Cache warmup
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: team-alembic/staple-actions/actions/mix-compile@a74b3b61209d35d45526df174766632f8aee03ed
@@ -28,7 +28,7 @@ jobs:
 
   formatter:
     name: Formatting
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -40,7 +40,7 @@ jobs:
 
   credo:
     name: Credo
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -52,7 +52,7 @@ jobs:
 
   dialyzer:
     name: Dialyzer
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -73,7 +73,7 @@ jobs:
     name: Test
     needs:
       - warmup
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:

.github/workflows/astarte-build-workflow.yaml

@@ -6,7 +6,7 @@ on:
 jobs:
   astarte-build:
     name: Astarte build
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       matrix:
         app:
@@ -29,17 +29,17 @@ jobs:
             service: astarte_trigger_engine
             tag: astarte/astarte_trigger_engine:snapshot
     steps:
-      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Setup Docker Buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
       - name: Build branch slug env variable (job-scoped)
         run: |
           # Slugify branch/tag name for Docker tag safety and consistency
           echo "BRANCH_SLUG=$(echo "${GITHUB_REF_NAME}" | sha1sum | cut -f 1 -d ' ')" >> $GITHUB_ENV
       # Build and save each Astarte app Docker image in parallel
       # and use build cache from GitHub Container Registry (isolated per app and branch to avoid cache thrashing)
       - name: Build ${{ matrix.app.name }}
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
         with:
           context: .
           build-args: SERVICE=${{ matrix.app.service }}
@@ -51,7 +51,7 @@ jobs:
       # Upload the built image as an artifact to be shared with other workflows
       # we use the commit SHA to avoid collisions between different workflow runs
       - name: Upload ${{ matrix.app.name }} artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
         with:
           # Give each image a unique artifact name to avoid clashes across matrix jobs
           name: astarte-images-${{ matrix.app.name }}

.github/workflows/astarte-e2e-build-workflow.yaml

@@ -10,16 +10,16 @@ env:
 jobs:
   end-to-end-build:
     name: End-to-end build
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
-      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
+      - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
       - name: Build branch slug env variable (job-scoped)
         run: |
           # Slugify branch/tag name for Docker tag safety and consistency
           echo "BRANCH_SLUG=$(echo "${GITHUB_REF_NAME}" | sha1sum | cut -f 1 -d ' ')" >> $GITHUB_ENV
       - name: Build Astarte E2E
-        uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7
         with:
           context: .
           file: tools/astarte_e2e/Dockerfile
@@ -29,7 +29,7 @@ jobs:
           cache-from: type=gha,scope=astarte_e2e-${{ env.BRANCH_SLUG }}
           cache-to: type=gha,mode=max,scope=astarte_e2e-${{ env.BRANCH_SLUG }}
       - name: Upload artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
         with:
           name: astarte-e2e-image
           path: ${{ runner.temp }}/astarte-e2e.tar

.github/workflows/astarte-end-to-end-test-workflow.yaml

@@ -37,20 +37,20 @@ jobs:
   end-to-end-test:
     needs: [e2e-build, astarte-build]
     name: End-to-end Test
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Initialize docker compose files
         run: docker run -v $(pwd)/compose:/compose astarte/docker-compose-initializer
       - name: Restore astarte images
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8
         with:
           # Download all app images; merge them into the same directory for loading
           pattern: astarte-images-*
           merge-multiple: true
           path: ${{ runner.temp }}
       - name: Restore astarte e2e image
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8
         with:
           name: astarte-e2e-image
           path: ${{ runner.temp }}
@@ -134,7 +134,7 @@ jobs:
         working-directory: .tmp/repos/astarte
         run: docker run -v $(pwd)/compose:/compose astarte/docker-compose-initializer
       - name: Restore astarte images
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8
         with:
           pattern: astarte-images-*
           merge-multiple: true
@@ -153,7 +153,7 @@ jobs:
       - uses: mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9
       - name: Cache container build
         id: cache-container
-        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
         with:
           path: .tmp/cache/containers
           key: ${{ runner.os }}-${{ hashFiles('justfile', 'scripts/**/*.sh', 'containers/**') }}

.github/workflows/astarte-libs-build-workflow.yaml

@@ -18,7 +18,7 @@ on:
 jobs:
   warmup:
     name: Cache warmup
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: team-alembic/staple-actions/actions/mix-compile@a74b3b61209d35d45526df174766632f8aee03ed
@@ -29,7 +29,7 @@ jobs:
 
   formatter:
     name: Formatting
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -41,7 +41,7 @@ jobs:
 
   credo:
     name: Credo
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -53,7 +53,7 @@ jobs:
 
   dialyzer:
     name: Dialyzer
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -76,7 +76,7 @@ jobs:
     name: Test
     needs:
       - warmup
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:

.github/workflows/docs-check.yml

@@ -17,7 +17,7 @@ on:
 jobs:
   warmup:
     name: Cache warmup
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: team-alembic/staple-actions/actions/mix-compile@a74b3b61209d35d45526df174766632f8aee03ed
@@ -28,7 +28,7 @@ jobs:
 
   formatter:
     name: Formatting
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -42,7 +42,7 @@ jobs:
     name: Generation
     needs:
       - warmup
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: team-alembic/staple-actions/actions/mix-compile@a74b3b61209d35d45526df174766632f8aee03ed
@@ -57,7 +57,7 @@ jobs:
           MIX_HOME: ${{ runner.temp }}/.mix
         working-directory: doc/
       - name: Upload documentation artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
         with:
           name: Documentation
           path: doc/doc/

.github/workflows/docs-workflow.yaml

@@ -18,14 +18,14 @@ on:
 
 jobs:
   docs:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       # Checkout the source
-      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           path: astarte
       # Checkout the docs repository
-      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           repository: astarte-platform/docs
           path: docs
@@ -41,7 +41,7 @@ jobs:
           mkdir docs/$DOCS_DIRNAME
           cp -r astarte/doc/doc/* docs/$DOCS_DIRNAME/
       - name: Checkout Swagger UI
-        uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           repository: swagger-api/swagger-ui
           path: swagger-ui

.github/workflows/pr-container-build-workflow.yaml

@@ -10,7 +10,7 @@ on:
 jobs:
   test-build-container:
     name: Test Container Build
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:
@@ -22,7 +22,7 @@ jobs:
           - astarte-realm-management
           - astarte-trigger-engine
     steps:
-      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Building Docker Image
         env:
           CONTAINER_IMAGE_NAME: gh_actions_test

.github/workflows/publish-release-to-dockerhub-workflow.yaml

@@ -85,7 +85,7 @@ jobs:
       - e2e_tests
     steps:
       - name: Check out the repo
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ inputs.target_tag || github.ref }}
 
@@ -96,10 +96,10 @@ jobs:
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
 
       - name: Build Docker image
-        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
         id: build
         with:
           context: .
@@ -116,7 +116,7 @@ jobs:
           touch "${{ runner.temp }}/digests/${digest#sha256:}"
 
       - name: Upload digest
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
         with:
           name: ${{ matrix.app }}-digests-${{ matrix.platform.platform-pair }}
           path: ${{ runner.temp }}/digests/*
@@ -125,7 +125,7 @@ jobs:
 
   merge_images:
     name: Publish release
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - build_release
     strategy:
@@ -140,20 +140,20 @@ jobs:
           - astarte_trigger_engine
     steps:
       - name: Download digests
-        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8
         with:
           path: ${{ runner.temp }}/digests
           pattern: ${{ matrix.app }}-digests-*
           merge-multiple: true
 
       - name: Login to Docker Hub
-        uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
+        uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta