CI/GHA: bump github actions used to latest versions

Since actions/setup-go@v4 it caches some go directories to speed up
building, testing etc. Alas, we link our code against different
libseccomp versions, and such caching my screw up builds.

To fix this, add libseccomp version information to cache keys. The only
way to do so in actions/setup-go is a file, so supply it with
libseccomp.pc which contains libseccomp version and is otherwise rarely
updated.

Signed-off-by: Kir Kolyshkin <[email protected]>

Author: kolyshkin

.github/workflows/test.yml

@@ -21,12 +21,7 @@ jobs:
     steps:
 
     - name: checkout
-      uses: actions/checkout@v3
-
-    - name: install go ${{ matrix.go-version }}
-      uses: actions/setup-go@v3
-      with:
-        go-version: ${{ matrix.go-version }}
+      uses: actions/checkout@v4
 
     - name: build libseccomp ${{ matrix.libseccomp }}
       run: |
@@ -69,6 +64,17 @@ jobs:
         # For TestExpectedSeccompVersion.
         echo "_EXPECTED_LIBSECCOMP_VERSION=$VER" >> $GITHUB_ENV
 
+    - name: install go ${{ matrix.go-version }}
+      uses: actions/setup-go@v5
+      with:
+        go-version: ${{ matrix.go-version }}
+        # Add libseccomp.pc path so that setup-go adds this file hash to cache key.
+        # This way, we'll have different caches for different libseccomp versions.
+        cache-dependency-path: |
+          go.sum
+          ${{ env.PKG_CONFIG_LIBDIR }}/libseccomp.pc
+
+
     - name: build
       run: make check-build
 

.github/workflows/validate.yml

@@ -14,19 +14,19 @@ jobs:
   lint:
     runs-on: ubuntu-20.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: install deps
         run: |
           sudo apt -q update
           sudo apt -q install libseccomp-dev
-      - uses: golangci/golangci-lint-action@v3
+      - uses: golangci/golangci-lint-action@v6
         with:
           version: v1.60
 
   codespell:
     runs-on: ubuntu-20.04
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
     - name: install deps
       # Version of codespell bundled with Ubuntu is way old, so use pip.
       run: pip install codespell