chore(deps): update github pipeline dependencies

Author: github-actions[bot]

.github/workflows/create-stable-release.yml

@@ -13,7 +13,7 @@ jobs:
 
     steps:
       - name: Checkout main branch
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: main
           fetch-depth: 0

.github/workflows/deploy-checkly.yml

@@ -34,11 +34,11 @@ jobs:
       contents: read
 
     steps:
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@v6
       with:
-        node-version: 22.x
+        node-version: 24.x
 
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
 
     - name: Get CortexApiKey secret
       id: get_cortex_secret

.github/workflows/github-template-update-downstream.yml

@@ -96,13 +96,13 @@ jobs:
           private-key: ${{ secrets.TERRAFORM_AUTOMATION_PRIVATE_KEY }}  
 
       - name: Checkout Template
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           path: template
 
       - name: Checkout Downstream
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           repository: workleap/${{ matrix.repo }}
           token: ${{ steps.auth.outputs.token }}

.github/workflows/required_checks_policy.yml

@@ -48,7 +48,7 @@ jobs:
         runs-on: ubuntu-latest
         timeout-minutes: ${{ inputs.timeout-minutes }}
         steps:
-            - uses: actions/checkout@v5
+            - uses: actions/checkout@v6
               with:
                 fetch-depth: 0
             - name: Evaluate required checks policy

.github/workflows/reusable-jira-workflow-tests.yml

@@ -58,7 +58,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Test Jira Extraction
       id: extract

.github/workflows/reusable-renovate-workflow.yml

@@ -27,7 +27,7 @@ jobs:
     runs-on: [idp]
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Get renovate-github-pat secret
         id: get_github_secret
@@ -64,9 +64,9 @@ jobs:
           version: 10
 
       - name: Use Node.js 22
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 22
+          node-version: 24
 
       - name: ${{ inputs.workflow_name }}
         shell: bash

.github/workflows/reusable-semgrep-workflow.yml

@@ -16,13 +16,13 @@ jobs:
 
     steps:
       - name: Checkout all commits and tags
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         if: ${{ github.event_name  == 'pull_request' }}
         with:
           fetch-depth: 0
 
       - name: Checkout single commit
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         if: ${{ github.event_name  != 'pull_request' }}
 
       - name: Pull request scan
@@ -35,14 +35,14 @@ jobs:
 
       - name: Save report as pipeline artifact
         if: ${{ github.event_name  != 'pull_request' }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: report.sarif
           path: report.sarif
 
       - name: Publish code scanning alerts
         if: ${{ github.event_name  != 'pull_request' }}
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: report.sarif
           category: semgrep

.github/workflows/terraform-auto-doc-check.yaml

@@ -17,15 +17,15 @@ jobs:
           private-key: ${{ secrets.TERRAFORM_AUTOMATION_PRIVATE_KEY }}     
 
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event_name == 'pull_request' && github.head_ref || github.ref_name }}
           fetch-depth: ${{ github.event.pull_request.commits }}
           token: ${{ steps.auth.outputs.token }}
 
       - name: Detect changed Terraform files
         id: detect_tf
-        uses: tj-actions/changed-files@ed68ef82c095e0d48ec87eccea555d944a631a4c # v46.0.5
+        uses: tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 # v47.0.1
         with:
           separator: "\n"
           files: |

.github/workflows/terraform-create-git-tag.yml

@@ -10,7 +10,7 @@ jobs:
     permissions:
       contents: write
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v6
       with:
         ref: ${{ github.event.pull_request.merge_commit_sha }}
         fetch-depth: '0'
@@ -22,7 +22,7 @@ jobs:
 
     - name: Detect changed Terraform files
       id: detect_tf
-      uses: tj-actions/changed-files@ed68ef82c095e0d48ec87eccea555d944a631a4c # v46.0.5
+      uses: tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 # v47.0.1
       with:
         files: |
           **.yml

.github/workflows/terraform-linter-check.yaml

@@ -13,7 +13,7 @@ jobs:
           app-id: ${{ secrets.TERRAFORM_AUTOMATION_APP_ID }}
           private-key: ${{ secrets.TERRAFORM_AUTOMATION_PRIVATE_KEY }}
 
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
         name: Checkout source code
         with:
           token: ${{ steps.auth.outputs.token }}