chore(ci): bump actions versions (#7201)

Author: paulbalaji

.github/actions/checkout-registry/action.yml

@@ -17,7 +17,7 @@ runs:
         fi
 
     - name: Checkout hyperlane-registry
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         repository: hyperlane-xyz/hyperlane-registry
         ref: ${{ env.REGISTRY_VERSION }}

.github/workflows/agent-release-artifacts.yml

@@ -43,7 +43,7 @@ jobs:
     runs-on: ${{ matrix.OS }}
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: ubuntu setup
         if: ${{ matrix.OS == 'depot-ubuntu-24.04-8' }}
         run: |

.github/workflows/codespell.yml

@@ -19,10 +19,10 @@ jobs:
 
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: '3.x'
 

.github/workflows/lint-pr.yaml

@@ -15,6 +15,6 @@ jobs:
     name: Validate PR title
     runs-on: ubuntu-latest
     steps:
-      - uses: amannn/action-semantic-pull-request@cfb60706e18bc85e8aec535e3c577abe8f70378e
+      - uses: amannn/action-semantic-pull-request@v6
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/monorepo-docker.yml

@@ -51,7 +51,7 @@ jobs:
     if: needs.check-env.outputs.gcloud-service-key == 'true'
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
           submodules: recursive

.github/workflows/release.yml

@@ -27,14 +27,14 @@ jobs:
     runs-on: depot-ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # check out full history
           fetch-depth: 0
           submodules: recursive
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version-file: .nvmrc
 
@@ -56,7 +56,7 @@ jobs:
     outputs:
       all_latest: ${{ steps.check.outputs.all_latest }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Retrieve package versions
         id: pkg
@@ -96,9 +96,9 @@ jobs:
         node-version: [18, 19, 20, 21, 22, 23]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node-version }}
 
@@ -122,14 +122,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # check out full history
           fetch-depth: 0
           submodules: recursive
 
       - name: Setup Node.js 18.x
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 18.x
 

.github/workflows/rust-docker.yml

@@ -42,7 +42,7 @@ jobs:
     needs: [check-env]
     if: needs.check-env.outputs.gcloud-service-key == 'true'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
       - name: Generate tag data

.github/workflows/rust.yml

@@ -25,7 +25,7 @@ jobs:
   lander-coverage:
     runs-on: depot-ubuntu-24.04-8
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
       - uses: dtolnay/rust-toolchain@stable
@@ -36,7 +36,7 @@ jobs:
           sudo rm -rf "/usr/local/share/boost"
           sudo rm -rf "$AGENT_TOOLSDIRECTORY"
       - name: Run sccache-cache
-        uses: mozilla-actions/[email protected].8
+        uses: mozilla-actions/[email protected].9
 
       - name: Install cargo-llvm-cov
         run: |
@@ -58,7 +58,7 @@ jobs:
         working-directory: ./rust/main
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v4
+        uses: codecov/codecov-action@v5
         with:
           files: coverage.json
           flags: ./rust/main/lander
@@ -68,7 +68,7 @@ jobs:
   test-rs:
     runs-on: depot-ubuntu-24.04-8
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
       - uses: dtolnay/rust-toolchain@stable
@@ -84,7 +84,7 @@ jobs:
           mold-version: 2.0.0
           make-default: true
       - name: Run sccache-cache
-        uses: mozilla-actions/[email protected].8
+        uses: mozilla-actions/[email protected].9
       - name: Run tests for main workspace
         run: cargo test
         working-directory: ./rust/main
@@ -95,7 +95,7 @@ jobs:
   lint-rs:
     runs-on: depot-ubuntu-24.04-8
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
       - uses: dtolnay/rust-toolchain@stable
@@ -109,7 +109,7 @@ jobs:
           sudo rm -rf "/usr/local/share/boost"
           sudo rm -rf "$AGENT_TOOLSDIRECTORY"
       - name: Run sccache-cache
-        uses: mozilla-actions/[email protected].8
+        uses: mozilla-actions/[email protected].9
       - name: Check for main workspace
         run: cargo check --release --all-features --all-targets
         working-directory: ./rust/main

.github/workflows/simapp-docker.yml

@@ -36,7 +36,7 @@ jobs:
     if: needs.check-env.outputs.gcloud-service-key == 'true'
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
           submodules: recursive

.github/workflows/static-analysis.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha || github.sha }}
           submodules: recursive
@@ -43,7 +43,7 @@ jobs:
         run: cd solidity && forge build --build-info
 
       - name: Static analysis
-        uses: crytic/[email protected].0
+        uses: crytic/[email protected].1
         id: slither
         with:
           target: 'solidity/'
@@ -53,7 +53,7 @@ jobs:
           ignore-compile: true
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: ${{ steps.slither.outputs.sarif }}
           category: 'slither'