Update CI tools (#4076)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: emcfarlane

.github/workflows/back-to-development.yaml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Get GitHub app token
-        uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         id: app_token
         with:
           app-id: ${{ env.APP_ID }}

.github/workflows/buf-binary-size.yaml

@@ -17,9 +17,9 @@ jobs:
       - name: checkout
         uses: actions/checkout@v5
       - name: setup-go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
-          go-version: '1.24.x'
+          go-version: '1.25.x'
       - name: cache
         uses: actions/cache@v4
         with:

.github/workflows/build-and-draft-release.yaml

@@ -20,7 +20,7 @@ jobs:
           VERSION="${{ github.event.inputs.version || github.head_ref}}"
           echo "VERSION=${VERSION##*/v}" >> $GITHUB_ENV
       - name: Get GitHub app token
-        uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         id: app_token
         with:
           app-id: ${{ env.APP_ID }}
@@ -30,9 +30,9 @@ jobs:
         with:
           token: ${{ steps.app_token.outputs.token }}
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
-          go-version: '1.24.x'
+          go-version: '1.25.x'
       - name: Set up Git name and email
         run: |
           git config user.name "${{ github.actor }}"

.github/workflows/ci.yaml

@@ -17,9 +17,9 @@ jobs:
       - name: checkout
         uses: actions/checkout@v5
       - name: setup-go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
-          go-version: '1.24.x'
+          go-version: '1.25.x'
       - name: cache
         uses: actions/cache@v4
         with:
@@ -53,9 +53,9 @@ jobs:
       - name: checkout
         uses: actions/checkout@v5
       - name: setup-go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
-          go-version: '1.24.x'
+          go-version: '1.25.x'
       - name: cache
         uses: actions/cache@v4
         with:

.github/workflows/codeql.yaml

@@ -19,16 +19,16 @@ jobs:
       - name: checkout
         uses: actions/checkout@v5
       - name: setup-go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
-          go-version: '1.24.x'
+          go-version: '1.25.x'
       - name: initialize
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           # Limit analysis to Go for now.
           # Available languages: https://docs.github.com/en/code-security/secure-coding/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#changing-the-languages-that-are-analyzed
           languages: go
       - name: autobuild
-        uses: github/codeql-action/autobuild@v3
+        uses: github/codeql-action/autobuild@v4
       - name: analyze
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4

.github/workflows/create-release-pr.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Get GitHub app token
-        uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         id: app_token
         with:
           app-id: ${{ env.APP_ID }}

.github/workflows/make-upgrade.yaml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Get GitHub app token
-        uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2.1.1
+        uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4
         id: app_token
         with:
           app-id: ${{ env.APP_ID }}
@@ -20,9 +20,9 @@ jobs:
         with:
           token: ${{ steps.app_token.outputs.token }}
       - name: setup-go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
-          go-version: '1.24.x'
+          go-version: '1.25.x'
           cache: false
       - name: Set up Git name and email
         run: |

.github/workflows/previous.yaml

@@ -14,13 +14,13 @@ jobs:
   test-previous:
     strategy:
       matrix:
-        go-version: ['1.23.x']
+        go-version: ['1.24.x']
     runs-on: ubuntu-latest
     steps:
       - name: checkout
         uses: actions/checkout@v5
       - name: setup-go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ${{ matrix.go-version }}
       - name: cache

.github/workflows/windows.yaml

@@ -24,9 +24,9 @@ jobs:
       - name: checkout
         uses: actions/checkout@v5
       - name: setup-go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
-          go-version: '1.24.x'
+          go-version: '1.25.x'
           cache: true
       - name: windows-cache
         uses: actions/cache@v4