Merge pull request #6368 from oasisprotocol/dependabot/github_actions/github-actions-5822fd79f6

ci: bump the github-actions group across 1 directory with 6 updates

Author: ptrus

.github/workflows/ci-lint.yml

@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # Check out pull request's HEAD commit instead of the merge commit to
           # prevent gitlint from failing due to too long commit message titles,
@@ -36,15 +36,15 @@ jobs:
           # Fetch all history so gitlint can check the relevant commits.
           fetch-depth: "0"
       - name: Set up Python 3
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: "3.x"
       - name: Set up Node.js 12
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: "12.x"
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ">=1.25.3"
       - name: Set up Rust
@@ -97,7 +97,7 @@ jobs:
         # Always run this step so that all linting errors can be seen at once.
         if: always()
       - name: Ensure a clean code checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           clean: true
         if: always()

.github/workflows/ci-reproducibility.yml

@@ -31,13 +31,13 @@ jobs:
         build_number: [1, 2]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # NOTE: We make a git checkout to a unique directory for each build to
           # catch reproducibility issues with code in different local paths.
           path: build${{ matrix.build_number }}
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ">=1.25.3"
       - name: Set up Rust
@@ -92,7 +92,7 @@ jobs:
           OASIS_NODE_MAKE_PATH: go/oasis-node/oasis-node
           OASIS_NODE_GORELEASER_PATH: dist/oasis-node_linux_amd64_v1/oasis-node
       - name: Upload checksums
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: oasis-node-SHA256SUMs-build${{ matrix.build_number }}
           path: oasis-node-SHA256SUMs
@@ -105,12 +105,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Download checksums for build 1
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           name: oasis-node-SHA256SUMs-build1
           path: oasis-node-SHA256SUMs-build1
       - name: Download checksum for build 2
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           name: oasis-node-SHA256SUMs-build2
           path: oasis-node-SHA256SUMs-build2

.github/workflows/docker.yml

@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # Check out pull request's HEAD commit instead of the merge commit.
           ref: ${{ github.event.pull_request.head.sha }}

.github/workflows/release-dev.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # Fetch all history as the recommended way to fetch all tags and
           # branches of the project.
@@ -33,7 +33,7 @@ jobs:
           # https://github.com/actions/checkout#fetch-all-history-for-all-tags-and-branches
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ">=1.25.3"
       - name: Set up Rust
@@ -75,7 +75,7 @@ jobs:
         run: |
           make release-build
       - name: Upload release artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         with:
           name: oasis-core-dev-release
           path: dist/*.tar.gz

.github/workflows/release.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           # Fetch all history as the recommended way to fetch all tags and
           # branches of the project.
@@ -36,7 +36,7 @@ jobs:
           fetch-depth: 0
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ">=1.25.3"