fix(workflows-deps): ZMSA-46: update release workflow and other workflows , update deps (#933)

* ZMSA-46: update release workflow

* update release workflow, update other workflows to use more modern action versions

* add end line

* bump deps

Author: NickOvt

.github/workflows/docker-latest.yml

@@ -16,7 +16,7 @@ jobs:
             should_run: ${{ steps.check_commit_message.outputs.should_run }}
         steps:
             - name: Checkout code
-              uses: actions/checkout@v3
+              uses: actions/checkout@v6
               with:
                   fetch-depth: 2
 
@@ -38,16 +38,16 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Checkout
-              uses: actions/checkout@v4
+              uses: actions/checkout@v6
 
             - name: Set up QEMU
-              uses: docker/setup-qemu-action@v2
+              uses: docker/setup-qemu-action@v3
               with:
                   platforms: 'arm64'
 
             - name: Set up Docker Buildx
               id: buildx
-              uses: docker/setup-buildx-action@v2
+              uses: docker/setup-buildx-action@v3
               with:
                   platforms: linux/arm64,linux/amd64
 

.github/workflows/release.yaml

@@ -23,24 +23,24 @@ jobs:
             patch: ${{ steps.release.outputs.patch }}
             release_created: ${{ steps.release.outputs.release_created }}
         steps:
-            - uses: google-github-actions/release-please-action@v4
+            - uses: googleapis/release-please-action@v4
               id: release
-              with:
-                  release-type: node
-            # The logic below handles the npm publication:
-            - uses: actions/checkout@v5
-              # these if statements ensure that a publication only occurs when
-              # a new release is created:
-              if: ${{ steps.release.outputs.release_created }}
-            - uses: actions/setup-node@v5
+
+    publish_npm:
+        needs: release_please
+        if: ${{ needs.release_please.outputs.release_created }}
+        runs-on: ubuntu-latest
+        permissions:
+            contents: read
+            id-token: write
+        steps:
+            - uses: actions/checkout@v6
+            - uses: actions/setup-node@v6
               with:
                   node-version: 24
                   registry-url: 'https://registry.npmjs.org'
-              if: ${{ steps.release.outputs.release_created }}
             - run: npm ci
-              if: ${{ steps.release.outputs.release_created }}
             - run: npm publish --provenance --access public
-              if: ${{ steps.release.outputs.release_created }}
 
     publish_docker:
         name: Create and publish a Docker image
@@ -59,7 +59,7 @@ jobs:
             - run: echo version v${{needs.release_please.outputs.major}}.${{needs.release_please.outputs.minor}}.${{needs.release_please.outputs.patch}}
 
             - name: Checkout repository
-              uses: actions/checkout@v4
+              uses: actions/checkout@v6
 
             - name: Set up QEMU
               uses: docker/setup-qemu-action@v3
@@ -102,7 +102,7 @@ jobs:
                   labels: ${{ steps.meta.outputs.labels }}
 
             - name: Generate artifact attestation
-              uses: actions/attest-build-provenance@v1
+              uses: actions/attest-build-provenance@v3
               with:
                   subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
                   subject-digest: ${{ steps.push.outputs.digest }}
@@ -116,12 +116,12 @@ jobs:
 
         steps:
             - name: Checkout repository
-              uses: actions/checkout@v4
+              uses: actions/checkout@v6
 
             - name: Setup Node
-              uses: actions/setup-node@v3
+              uses: actions/setup-node@v6
               with:
-                  node-version: 18
+                  node-version: 24
 
             - name: Install dependencies
               run: npm install --omit=dev

.github/workflows/stale.yml

@@ -7,7 +7,7 @@ jobs:
     stale:
         runs-on: ubuntu-latest
         steps:
-            - uses: actions/stale@v9
+            - uses: actions/stale@v10
               with:
                   stale-issue-message: 'This issue is stale because it has been open 45 days with no activity. Remove stale label or comment or this will be closed in 15 days.'
                   stale-pr-message: 'This PR is stale because it has been open 45 days with no activity. Remove stale label or comment or this will be closed in 20 days.'

.github/workflows/test.yml

@@ -26,7 +26,7 @@ jobs:
                 ports:
                     - 6379:6379
         steps:
-            - uses: actions/checkout@v4
+            - uses: actions/checkout@v6
 
             - name: Start MongoDB
               uses: supercharge/mongodb-github-action@1.7.0
@@ -36,7 +36,7 @@ jobs:
                   mongodb-db: wildduck-test
 
             - name: Use Node.js ${{ matrix.node }}
-              uses: actions/setup-node@v4
+              uses: actions/setup-node@v6
               with:
                   node-version: ${{ matrix.node }}
 

.release-please-manifest.json

@@ -0,0 +1,3 @@
+{
+    ".": "1.46.11"
+}