ci: update some actions to the latest version

.github/labeler-areas.yml

@@ -4,89 +4,129 @@
 # see how this config file is used.
 
 "area: build":
-  - ".github/*"
-  - ".github/workflows/**"
-  - "build-tools/**"
-  - "common/build/**"
-  - "tools/markdown-magic/**"
-  - "tools/pipelines/**"
+  changed-files:
+    - any-glob-to-any-file:
+      - ".github/*"
+      - ".github/workflows/**"
+      - "build-tools/**"
+      - "common/build/**"
+      - "tools/markdown-magic/**"
+      - "tools/pipelines/**"
 
 "area: contributor experience":
-  - ".vscode/**"
+  changed-files:
+    - any-glob-to-any-file: ".vscode/**"
 
 "area: dds":
-  - experimental/dds/**
-  - packages/dds/**
+  changed-files:
+    - any-glob-to-any-file:
+      - experimental/dds/**
+      - packages/dds/**
 
 "area: dds: tree":
-  - experimental/dds/tree/**
-  - experimental/dds/tree2/**
-  - packages/dds/tree/**
+  changed-files:
+    - any-glob-to-any-file:
+      - experimental/dds/tree/**
+      - experimental/dds/tree2/**
+      - packages/dds/tree/**
 
 "area: dds: propertydds":
-  - experimental/PropertyDDS/**
+  changed-files:
+    - any-glob-to-any-file: experimental/PropertyDDS/**
 
 "area: dds: sharedstring":
-  - packages/dds/sequence/**
+  changed-files:
+    - any-glob-to-any-file: packages/dds/sequence/**
 
 "area: definitions":
-  - common/lib/container-definitions/**
-  - common/lib/core-interfaces/**
-  - common/lib/driver-definitions/**
+  changed-files:
+    - any-glob-to-any-file:
+      - common/lib/container-definitions/**
+      - common/lib/core-interfaces/**
+      - common/lib/driver-definitions/**
 
 "area: dev experience":
-  - experimental/framework/**
+  changed-files:
+    - any-glob-to-any-file: experimental/framework/**
 
 "area: driver":
-  - packages/drivers/**
+  changed-files:
+    - any-glob-to-any-file: packages/drivers/**
 
 "area: examples":
-  - examples/**
-  - experimental/examples/**
+  changed-files:
+    - any-glob-to-any-file:
+      - examples/**
+      - experimental/examples/**
 
 "area: framework":
-  - packages/framework/**
+  changed-files:
+    - any-glob-to-any-file: packages/framework/**
 
 "area: loader":
-  - packages/loader/**
+  changed-files:
+    - any-glob-to-any-file: packages/loader/**
 
 "area: odsp-driver":
-  - packages/drivers/*odsp*/**
-  - packages/utils/odsp-doclib-utils/**
+  changed-files:
+    - any-glob-to-any-file:
+      - packages/drivers/*odsp*/**
+      - packages/utils/odsp-doclib-utils/**
 
 # Add "area: repo" label to any root or .github changes
 "area: repo":
-  - any: ["*", ".github/**", "!BREAKING.md"]
+  changed-files:
+    - any-glob-to-any-file:
+      - "*"
+      - ".github/**"
+      - "!BREAKING.md"
 
 "area: runtime":
-  - packages/runtime/**
+  changed-files:
+    - any-glob-to-any-file: packages/runtime/**
 
 "area: server":
-  - server/**
+  changed-files:
+    - any-glob-to-any-file: server/**
 
 "area: tests":
-  - packages/test/**
+  changed-files:
+    - any-glob-to-any-file: packages/test/**
 
 "area: tools":
-  - any: ["common/build/**", "tools/**", "!tools/markdown-magic/**"]
+  changed-files:
+    - any-glob-to-any-file:
+      - common/build/**
+      - tools/**
+      - "!tools/markdown-magic/**"
 
 "area: website":
-  - any: ["docs/**", "!docs/content/**"]
+  changed-files:
+    - any-glob-to-any-file:
+      - docs/**
+      - "!docs/content/**"
 
 "breaking change":
-  - BREAKING.md
+  changed-files:
+    - any-glob-to-any-file: BREAKING.md
 
 "changeset-present":
-  - .changeset/**
-  - server/routerlicious/.changeset/**
+  changed-files:
+    - any-glob-to-any-file:
+      - .changeset/**
+      - server/routerlicious/.changeset/**
 
 dependencies:
-  - package-lock.json
-  - pnpm-lock.yaml
+  changed-files:
+    - any-glob-to-any-file:
+      - package-lock.json
+      - pnpm-lock.yaml
 
 documentation:
-  - docs/content/**
+  changed-files:
+    - any-glob-to-any-file: docs/content/**
 
 # flag changes to public APIs so they can be reviewed to see if they're breaking
 "public api change":
-  - "**/api-report/**"
+  changed-files:
+    - any-glob-to-any-file: "**/api-report/**"

.github/labeler-changesets.yml

@@ -5,4 +5,5 @@
 
 # Require changesets for server public API changes
 "changeset-required":
-  - "**/routerlicious/api-report/**"
+  changed-files:
+    - any-glob-to-any-file: "**/routerlicious/api-report/**"

.github/workflows/changeset-reporter.yml

@@ -26,7 +26,8 @@ jobs:
           persist-credentials: false
 
       - name: Download results
-        uses: dawidd6/action-download-artifact@bd10f381a96414ce2b13a11bfa89902ba7cea07f # ratchet:dawidd6/[email protected]
+        # release notes: https://github.com/dawidd6/action-download-artifact/releases/tag/v11
+        uses: dawidd6/action-download-artifact@ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5 # ratchet:dawidd6/action-download-artifact@v11
         with:
           workflow: pr-check-changeset.yml
           run_id: ${{ github.event.workflow_run.id }}
@@ -38,17 +39,17 @@ jobs:
 
       - name: Required but missing
         if: fromJson(steps.changeset.outputs.CHANGESET).required == true && fromJson(steps.changeset.outputs.CHANGESET).changesetFound == false
-        # release notes: https://github.com/marocchino/sticky-pull-request-comment/releases/tag/v2.9.0
-        uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31 # ratchet:marocchino/sticky-pull-request-comment@v2.9.0
+        # release notes: https://github.com/marocchino/sticky-pull-request-comment/releases/tag/v2.9.4
+        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # ratchet:marocchino/sticky-pull-request-comment@v2
         with:
           header: changeset
           number: ${{ fromJson(steps.changeset.outputs.CHANGESET).pr }}
           path: ${{ github.workspace }}/.github/workflows/data/changeset-missing.md
 
       - name: Required and present
         if: fromJson(steps.changeset.outputs.CHANGESET).required == true && fromJson(steps.changeset.outputs.CHANGESET).changesetFound == true
-        # release notes: https://github.com/marocchino/sticky-pull-request-comment/releases/tag/v2.9.0
-        uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31 # ratchet:marocchino/sticky-pull-request-comment@v2.9.0
+        # release notes: https://github.com/marocchino/sticky-pull-request-comment/releases/tag/v2.9.4
+        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # ratchet:marocchino/sticky-pull-request-comment@v2
         with:
           header: changeset
           number: ${{ fromJson(steps.changeset.outputs.CHANGESET).pr }}
@@ -58,8 +59,8 @@ jobs:
 
       - name: Changeset not required
         if: fromJson(steps.changeset.outputs.CHANGESET).required == false && fromJson(steps.changeset.outputs.CHANGESET).changesetFound == true
-        # release notes: https://github.com/marocchino/sticky-pull-request-comment/releases/tag/v2.9.0
-        uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31 # ratchet:marocchino/sticky-pull-request-comment@v2.9.0
+        # release notes: https://github.com/marocchino/sticky-pull-request-comment/releases/tag/v2.9.4
+        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # ratchet:marocchino/sticky-pull-request-comment@v2
         with:
           header: changeset
           number: ${{ fromJson(steps.changeset.outputs.CHANGESET).pr }}

.github/workflows/linkcheck-reporter.yml

@@ -7,16 +7,17 @@ on:
 
 permissions:
   contents: read
-  actions: read  # for dawidd6/action-download-artifact to query and download artifacts
+  actions: read # for dawidd6/action-download-artifact to query and download artifacts
 
 jobs:
   load_report:
     permissions:
-      pull-requests: write  # for marocchino/sticky-pull-request-comment to create or update PR comment
+      pull-requests: write # for marocchino/sticky-pull-request-comment to create or update PR comment
     runs-on: ubuntu-latest
     steps:
       - name: Download results
-        uses: dawidd6/action-download-artifact@bd10f381a96414ce2b13a11bfa89902ba7cea07f # ratchet:dawidd6/[email protected]
+        # release notes: https://github.com/dawidd6/action-download-artifact/releases/tag/v11
+        uses: dawidd6/action-download-artifact@ac66b43f0e6a346234dd65d4d0c8fbb31cb316e5 # ratchet:dawidd6/action-download-artifact@v11
         with:
           workflow: website-validation.yml
           # workflow_conclusion: completed
@@ -28,8 +29,8 @@ jobs:
         run: echo "pr=$(cat pr)" >> $GITHUB_OUTPUT
         working-directory: ./results
       - name: Post report in comment
-        # release notes: https://github.com/marocchino/sticky-pull-request-comment/releases/tag/v2.9.0
-        uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31 # ratchet:marocchino/sticky-pull-request-comment@v2.9.0
+        # release notes: https://github.com/marocchino/sticky-pull-request-comment/releases/tag/v2.9.4
+        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # ratchet:marocchino/sticky-pull-request-comment@v2
         with:
           header: linkreport
           recreate: true

.github/workflows/pr-changeset-review.yml

@@ -30,7 +30,9 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # ratchet:actions/checkout@v5
         with:
           persist-credentials: false
-      - uses: errata-ai/vale-action@d89dee975228ae261d22c15adcd03578634d429c # ratchet:errata-ai/[email protected]
+
+      # release notes: https://github.com/errata-ai/vale-action/releases/tag/v2.1.1
+      - uses: errata-ai/vale-action@d89dee975228ae261d22c15adcd03578634d429c # ratchet:errata-ai/vale-action@v2
         with:
           files: .changeset
           vale_flags: "--glob=*-*-*.md"

.github/workflows/pr-check-changeset.yml

@@ -76,8 +76,8 @@ jobs:
           echo $(jq -c '. += {required: false}' changeset-metadata.json) > changeset-metadata.json
 
       - name: Upload changeset metadata
-        # release notes: https://github.com/actions/upload-artifact/releases/tag/v4.4.3
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # ratchet:actions/upload-artifact@v4
+        # release notes: https://github.com/actions/upload-artifact/releases/tag/v5.0.0
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # ratchet:actions/upload-artifact@v5
         with:
           name: changeset-metadata
           path: ./changeset-metadata.json
@@ -102,8 +102,8 @@ jobs:
           echo $(jq -c '. += { pr: "${{ github.event.number }}" }' changeset-metadata.json) > changeset-metadata.json
 
       - name: Upload changeset metadata
-        # release notes: https://github.com/actions/upload-artifact/releases/tag/v4.4.3
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # ratchet:actions/upload-artifact@v4
+        # release notes: https://github.com/actions/upload-artifact/releases/tag/v5.0.0
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # ratchet:actions/upload-artifact@v5
         with:
           name: changeset-metadata
           path: ./changeset-metadata.json

.github/workflows/pr-labeler.yml

@@ -5,12 +5,12 @@ on:
     branches: [main, next, release/**/*]
 
 permissions:
-  contents: read  # for actions/labeler to determine modified files
+  contents: read # for actions/labeler to determine modified files
 
 jobs:
   areas_label:
     permissions:
-      pull-requests: write  # for actions/labeler to add labels to PRs
+      pull-requests: write # for actions/labeler to add labels to PRs
     runs-on: ubuntu-latest
     name: Label areas
     # Skip labeling main-next merge PRs. The area labels are noisy and distracting for main-next PRs because they can
@@ -20,7 +20,8 @@ jobs:
     # This is implemented by comparing the PR title because at creation time, the PR has no labels (and the GItHub API
     # does not have a way to set labels at creation either), so skipping based on labels does not work.
     steps:
-      - uses: actions/labeler@5c7539237e04b714afd8ad9b4aed733815b9fab4 # ratchet:actions/[email protected]
+      # release notes: https://github.com/actions/labeler/releases/tag/v6.0.1
+      - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # ratchet:actions/labeler@v6
         if: "github.event.pull_request.title != 'Automation: main-next integrate'"
         with:
           configuration-path: ".github/labeler-areas.yml"
@@ -30,21 +31,23 @@ jobs:
   # this CI job calls the labeler action wuth sync-labels=false, so the label won't be removed automatically.
   changesets_label:
     permissions:
-      pull-requests: write  # for actions/labeler to add labels to PRs
+      pull-requests: write # for actions/labeler to add labels to PRs
     runs-on: ubuntu-latest
     name: Label changeset-required
     steps:
-      - uses: actions/labeler@5c7539237e04b714afd8ad9b4aed733815b9fab4 # ratchet:actions/[email protected]
+      # release notes: https://github.com/actions/labeler/releases/tag/v6.0.1
+      - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # ratchet:actions/labeler@v6
         with:
           configuration-path: ".github/labeler-changesets.yml"
           repo-token: "${{ github.token }}"
           sync-labels: false # The changeset-required label is often added manually, so don't remove it.
   branches_label:
     permissions:
-      pull-requests: write  # for actions/labeler to add labels to PRs
+      pull-requests: write # for actions/labeler to add labels to PRs
     runs-on: ubuntu-latest
     name: Label base branches and external contributors
     steps:
-      - uses: srvaroa/labeler@9c29ad1ef33d169f9ef33c52722faf47a566bcf3 # ratchet:srvaroa/labeler@v1
+      # release notes: https://github.com/srvaroa/labeler/releases/tag/v1.13.0
+      - uses: srvaroa/labeler@0a20eccb8c94a1ee0bed5f16859aece1c45c3e55 # ratchet:srvaroa/labeler@v1
         env:
           GITHUB_TOKEN: "${{ github.token }}"

.github/workflows/pr-release-branch-warning.yml

@@ -18,7 +18,7 @@ permissions:
 jobs:
   warning:
     permissions:
-      pull-requests: write  # for marocchino/sticky-pull-request-comment to create or update PR comment
+      pull-requests: write # for marocchino/sticky-pull-request-comment to create or update PR comment
     runs-on: ubuntu-latest
     steps:
       # release notes: https://github.com/actions/checkout/releases/tag/v5.0.0
@@ -28,8 +28,8 @@ jobs:
           submodules: false
 
       - name: Post warning in comment
-        # release notes: https://github.com/marocchino/sticky-pull-request-comment/releases/tag/v2.9.0
-        uses: marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31 # ratchet:marocchino/sticky-pull-request-comment@v2.9.0
+        # release notes: https://github.com/marocchino/sticky-pull-request-comment/releases/tag/v2.9.4
+        uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # ratchet:marocchino/sticky-pull-request-comment@v2
         with:
           header: release-warning
           path: ${{ github.workspace }}/.github/workflows/data/release-branch-warning.md

.github/workflows/pr-validation.yml

@@ -23,7 +23,9 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # ratchet:actions/checkout@v5
         with:
           persist-credentials: false
-      - uses: mszostok/codeowners-validator@7f3f5e28c6d7b8dfae5731e54ce2272ca384592f # ratchet:mszostok/[email protected]
+
+      # release notes: https://github.com/mszostok/codeowners-validator/releases/tag/v0.7.4
+      - uses: mszostok/codeowners-validator@7f3f5e28c6d7b8dfae5731e54ce2272ca384592f # ratchet:mszostok/codeowners-validator@v0
         with:
           github_access_token: "${{ secrets.GITHUB_TOKEN }}"
           checks: "files,duppatterns,syntax"
@@ -35,7 +37,8 @@ jobs:
     name: PR template placeholder content
     runs-on: ubuntu-latest
     steps:
-      - uses: sitezen/pr-comment-checker@f1e956fac00c6d1163d15841886ae80b7ae58ecb # ratchet:sitezen/[email protected]
+      # release notes: https://github.com/sitezen/pr-comment-checker/releases/tag/v1.0.1
+      - uses: sitezen/pr-comment-checker@f1e956fac00c6d1163d15841886ae80b7ae58ecb # ratchet:sitezen/pr-comment-checker@v1
         with:
           pr_description_should_not_contain: |
             Feel free to remove or alter parts of this template that do not offer value for your specific change