Update action versions and fix tests (jfrog#595)

Author: attiasas

.github/actions/install-and-setup/action.yml

@@ -12,7 +12,7 @@ runs:
   steps:
     # Install dependencies
     - name: Setup Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@v6
       with:
         go-version: 1.24.x
     # - name: Setup Go with cache
@@ -27,21 +27,21 @@ runs:
       run: gem install cocoapods
 
     - name: Install npm
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v6
       with:
         node-version: "16"
     - name: Setup Pnpm
-      uses: pnpm/action-setup@v3
+      uses: pnpm/action-setup@v4
       with:
         version: 8
 
     - name: Install Java
-      uses: actions/setup-java@v4
+      uses: actions/setup-java@v5
       with:
         java-version: "11"
         distribution: "adopt"
     - name: Setup Gradle
-      uses: gradle/gradle-build-action@v2
+      uses: gradle/actions/setup-gradle@v3
       with:
         gradle-version: 7.6
 
@@ -50,7 +50,7 @@ runs:
       with:
         nuget-version: 6.11.0
     - name: Install dotnet
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: '6.x'
 
@@ -72,7 +72,7 @@ runs:
       shell: 'bash'
 
     - name: Setup Python3
-      uses: actions/setup-python@v5
+      uses: actions/setup-python@v6
       with:
         python-version: "3.x"
     - name: Setup Pipenv
@@ -87,21 +87,16 @@ runs:
         conan profile detect
       shell: ${{ runner.os == 'Windows' && 'powershell' || 'bash' }}
 
-    - name: Install Swift on Linux
-      uses: swift-actions/setup-swift@v2
-      if: ${{ inputs.install-swift == 'true' && runner.os == 'Linux'}}
-
-    - name: Install Swift on MacOS
-      run: brew install swift
-      shell: ${{ runner.os == 'macOS' && 'sh' || 'bash' || 'pwsh' }}
-      if: ${{ inputs.install-swift == 'true' && runner.os == 'macOS'}}
+    - name: Install Swift on Linux and macOS
+      uses: SwiftyLab/setup-swift@latest
+      if: ${{ inputs.install-swift == 'true' && (runner.os == 'Linux' || runner.os == 'macOS') }}
 
     - name: Install Swift on Windows
       uses: compnerd/[email protected]
       with:
         branch: swift-6.1-release
         tag: 6.1-RELEASE
-      if: ${{ inputs.install-swift == 'true' && runner.os == 'Windows'}}
+      if: ${{ inputs.install-swift == 'true' && runner.os == 'Windows' }}
 
     # Ensure Java 11 remains active after all installations (Swift setup might override it)
     - name: Force Java 11 on Windows

.github/workflows/analysis.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ${{ matrix.os }}-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -33,7 +33,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Source
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Go with cache
         uses: jfrog/.github/actions/install-go-with-cache@main
@@ -48,7 +48,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Source
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup Go with cache
         uses: jfrog/.github/actions/install-go-with-cache@main
@@ -60,7 +60,7 @@ jobs:
     name: Spell Check
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Check spelling
         uses: crate-ci/typos@master

.github/workflows/cla.yml

@@ -19,7 +19,7 @@ jobs:
       - name: "CLA Assistant"
         if: ${{ steps.sign-or-recheck.outputs.match != '' || github.event_name == 'pull_request_target' }}
         # Alpha Release
-        uses: cla-assistant/[email protected].0
+        uses: cla-assistant/[email protected].1
         env:
           # Generated and maintained by GitHub
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/embedded-jar-test.yml

@@ -15,7 +15,7 @@ jobs:
     env:
       GOPROXY: direct
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Download JARs
         run: buildscripts/download-jars.sh

.github/workflows/test.yml

@@ -3,6 +3,7 @@ name: JFrog CLI Security Tests
 permissions:
   actions: read
   contents: read
+  pull-requests: write
 
 on:
   push:
@@ -33,17 +34,17 @@ jobs:
     if: contains(github.event.pull_request.labels.*.name, 'safe to test') || github.event_name == 'push'
     runs-on: ubuntu-latest
     steps:
+      - name: Checkout code
+        uses: actions/checkout@v5
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+
       - name: Remove 'safe to test' label
         uses: actions-ecosystem/action-remove-labels@v1
         if: ${{ github.event_name != 'push' }}
         with:
           labels: "safe to test"
 
-      - name: Checkout code
-        uses: actions/checkout@v4
-        with:
-          ref: ${{ github.event.pull_request.head.sha }}
-
       - name: Start FastCI Optimization
         uses: jfrog-fastci/fastci@main
         with:
@@ -69,7 +70,7 @@ jobs:
     steps:
       # Prepare the environment
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -122,7 +123,7 @@ jobs:
     steps:
       # Prepare the environment
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -153,7 +154,7 @@ jobs:
     steps:
       # Prepare the environment
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -182,7 +183,7 @@ jobs:
     steps:
       # Prepare the environment
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: Start FastCI Optimization
@@ -209,7 +210,7 @@ jobs:
     steps:
       # Prepare the environment
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: Start FastCI Optimization
@@ -236,7 +237,7 @@ jobs:
     steps:
       # Prepare the environment
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -265,7 +266,7 @@ jobs:
     steps:
       # Prepare the environment
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -294,7 +295,7 @@ jobs:
     steps:
       # Prepare the environment
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -323,7 +324,7 @@ jobs:
     steps:
       # Prepare the environment
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}