chore(deps): update github actions

.github/workflows/auto-review.yml

@@ -14,12 +14,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v6
         with:
-          python-version: '3.11'
+          python-version: '3.14'
 
       - name: Install dependencies
         run: |
@@ -28,7 +28,7 @@ jobs:
 
       - name: Generate Bootc Actions Token
         id: bootc_token
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@v2
         with:
           app-id: ${{ secrets.APP_ID }}
           private-key: ${{ secrets.APP_PRIVATE_KEY }}

.github/workflows/autovendor.yml

@@ -12,7 +12,7 @@ jobs:
   vendor:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - uses: dtolnay/rust-toolchain@stable
       - name: Install vendor tool
         run: cargo install cargo-vendor-filterer

.github/workflows/ci.yml

@@ -29,7 +29,7 @@ jobs:
   validate:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Bootc Ubuntu Setup
         uses: ./.github/actions/bootc-ubuntu-setup
       - name: Validate (default)
@@ -38,7 +38,7 @@ jobs:
   container-continuous:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Bootc Ubuntu Setup
         uses: ./.github/actions/bootc-ubuntu-setup
       - name: Build with continuous repo enabled
@@ -47,7 +47,7 @@ jobs:
   cargo-deny:
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - uses: EmbarkStudios/cargo-deny-action@v2
       with:
         log-level: warn
@@ -59,7 +59,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Bootc Ubuntu Setup
         uses: ./.github/actions/bootc-ubuntu-setup
       - name: Enable fsverity for /
@@ -113,7 +113,7 @@ jobs:
   docs:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Bootc Ubuntu Setup
         uses: ./.github/actions/bootc-ubuntu-setup
       - name: Build mdbook
@@ -128,7 +128,7 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Bootc Ubuntu Setup
         uses: ./.github/actions/bootc-ubuntu-setup
       - name: Install qemu-utils
@@ -160,7 +160,7 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Bootc Ubuntu Setup
         uses: ./.github/actions/bootc-ubuntu-setup
       - name: Install deps
@@ -174,7 +174,7 @@ jobs:
         run: mkdir -p target
 
       - name: Download disk.raw
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: PR-${{ github.event.number }}-${{ matrix.test_os }}-${{ env.ARCH }}-disk
           path: target

.github/workflows/docs.yml

@@ -18,7 +18,7 @@ jobs:
   build:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Bootc Ubuntu Setup
         uses: ./.github/actions/bootc-ubuntu-setup
       - name: Build mdbook
@@ -27,7 +27,7 @@ jobs:
         id: pages
         uses: actions/configure-pages@v5
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v4
         with:
           path: ./target/docs
 

.github/workflows/labeler.yml

@@ -9,5 +9,5 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/labeler@v5
+      - uses: actions/checkout@v5
+      - uses: actions/labeler@v6

.github/workflows/release.yml

@@ -24,7 +24,7 @@ jobs:
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
           token: ${{ steps.app-token.outputs.token }}

.github/workflows/scheduled-release.yml

@@ -29,7 +29,7 @@ jobs:
           private-key: ${{ secrets.APP_PRIVATE_KEY }}
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
           token: ${{ steps.app-token.outputs.token }}

crates/ostree-ext/.github/workflows/rust.yml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - name: Code lints
         run: ./ci/lints.sh
       - name: Install deps
@@ -47,7 +47,7 @@ jobs:
     runs-on: ubuntu-latest
     container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - name: Install deps
         run: ./ci/installdeps.sh
       - name: Cache Dependencies
@@ -67,7 +67,7 @@ jobs:
     container: quay.io/coreos-assembler/fcos-buildroot:testing-devel
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
       - name: Install deps
         run: ./ci/installdeps.sh
       - name: Detect crate MSRV
@@ -91,8 +91,8 @@ jobs:
   cargo-deny:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3
-    - uses: EmbarkStudios/cargo-deny-action@v1
+    - uses: actions/checkout@v5
+    - uses: EmbarkStudios/cargo-deny-action@v2
       with:
         log-level: warn
         command: check bans sources licenses
@@ -103,9 +103,9 @@ jobs:
     container: quay.io/fedora/fedora-coreos:testing-devel
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
       - name: Download ostree-ext-cli
-        uses: actions/download-artifact@v4.1.8
+        uses: actions/download-artifact@v5.0.0
         with:
           name: ostree-ext-cli
       - name: Install
@@ -119,9 +119,9 @@ jobs:
     container: quay.io/fedora/fedora-coreos:testing-devel
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
       - name: Download ostree-ext-cli
-        uses: actions/download-artifact@v4.1.8
+        uses: actions/download-artifact@v5.0.0
         with:
           name: ostree-ext-cli
       - name: Install
@@ -133,13 +133,13 @@ jobs:
     needs: build
     runs-on: ubuntu-latest
     container:
-      image: quay.io/fedora/fedora-bootc:41
+      image: quay.io/fedora/fedora-bootc:44
       options: "--privileged --pid=host -v /var/tmp:/var/tmp -v /run/dbus:/run/dbus -v /run/systemd:/run/systemd -v /:/run/host"
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Download
-        uses: actions/download-artifact@v4.1.8
+        uses: actions/download-artifact@v5.0.0
         with:
           name: ostree-ext-cli
       - name: Install
@@ -152,14 +152,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
       - name: Checkout coreos-layering-examples
-        uses: actions/checkout@v3
+        uses: actions/checkout@v5
         with:
           repository: coreos/coreos-layering-examples
           path: coreos-layering-examples
       - name: Download
-        uses: actions/download-artifact@v4.1.8
+        uses: actions/download-artifact@v5.0.0
         with:
           name: ostree-ext-cli
       - name: Integration tests