[actions] Update GitHub Actions versions - 2026-03-06

[github-actions]

GitHub Actions Updates - 2026-03-06

This PR updates GitHub Actions versions in .github/aw/actions-lock.json to their latest compatible releases, and syncs workflow source files from their upstream repositories.

Actions Updated

• docker/build-push-action: v6.19.2 → v7
• docker/metadata-action: v5.10.0 → v6
• github/codeql-action/upload-sarif: v4.32.5 → v4.32.6
• github/stale-repos: v9.0.1 → v9.0.2
• actions/setup-node: v6.2.0 entry removed (v6.3.0 entry retained)
• docker/login-action: v3.7.0 entry removed (v4 entry retained)
• docker/setup-buildx-action: v3.12.0 entry removed (v4 entry retained)

Workflow Files Updated

The following workflow source .md files were updated from their upstream repositories:

• go-logger.md
• hourly-ci-cleaner.md
• release.md
• shared/ci-data-analysis.md
• slide-deck-maintainer.md
• stale-repo-identifier.md
• technical-doc-writer.md
• tidy.md
• unbloat-docs.md

Summary

• Total actions updated: 4 version bumps + 3 stale entries removed
• Update command: gh aw update --verbose
• Workflow lock files: Not included (will be regenerated on next compile)

Notes

• All action updates respect semantic versioning and maintain compatibility
• Actions are pinned to commit SHAs for security
• Workflow .lock.yml files are excluded from this PR and will be regenerated during the next compilation

---

This PR was automatically created by the Daily Workflow Updater workflow.

Generated by Daily Workflow Updater · ◷

• expires on Mar 7, 2026, 9:29 AM UTC

---

Note

This was originally intended as a pull request, but the git push operation failed.

Workflow Run: View run details and download patch artifact

The patch file is available in the agent-artifacts artifact in the workflow run linked above.

To create a pull request with the changes:

# Download the artifact from the workflow run
gh run download 22757281933 -n agent-artifacts -D /tmp/agent-artifacts-22757281933

# Create a new branch
git checkout -b update/actions-2026-03-06-50ea704d91fcc23e

# Apply the patch (--3way handles cross-repo patches where files may already exist)
git am --3way /tmp/agent-artifacts-22757281933/aw-update-actions-2026-03-06.patch

# Push the branch to origin
git push origin update/actions-2026-03-06-50ea704d91fcc23e

# Create the pull request
gh pr create --title '[actions] Update GitHub Actions versions - 2026-03-06' --base main --head update/actions-2026-03-06-50ea704d91fcc23e --repo github/gh-aw

Show patch preview (258 of 258 lines)

From 97479b2db7241101c34fdaef36b271606b37bca8 Mon Sep 17 00:00:00 2001
From: Copilot <copilot@github.com>
Date: Fri, 6 Mar 2026 09:27:53 +0000
Subject: [PATCH] chore: update GitHub Actions versions - 2026-03-06
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- actions/setup-node: v6.2.0 removed (v6.3.0 retained)
- docker/build-push-action: v6.19.2 → v7
- docker/login-action: v3.7.0 removed (v4 retained)
- docker/metadata-action: v5.10.0 → v6
- docker/setup-buildx-action: v3.12.0 removed (v4 retained)
- github/codeql-action/upload-sarif: v4.32.5 → v4.32.6
- github/stale-repos: v9.0.1 → v9.0.2

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 .github/aw/actions-lock.json                 | 38 +++++---------------
 .github/workflows/go-logger.md               |  2 +-
 .github/workflows/hourly-ci-cleaner.md       |  2 +-
 .github/workflows/release.md                 | 12 +++----
 .github/workflows/shared/ci-data-analysis.md |  2 +-
 .github/workflows/slide-deck-maintainer.md   |  2 +-
 .github/workflows/stale-repo-identifier.md   |  2 +-
 .github/workflows/technical-doc-writer.md    |  2 +-
 .github/workflows/tidy.md                    |  2 +-
 .github/workflows/unbloat-docs.md            |  2 +-
 10 files changed, 23 insertions(+), 43 deletions(-)

diff --git a/.github/aw/actions-lock.json b/.github/aw/actions-lock.json
index b5b7efc..8ac5ea6 100644
--- a/.github/aw/actions-lock.json
+++ b/.github/aw/actions-lock.json
@@ -60,11 +60,6 @@
       "version": "v5.2.0",
       "sha": "be666c2fcd27ec809703dec50e508c2fdc7f6654"
     },
-    "actions/setup-node@v6.2.0": {
-      "repo": "actions/setup-node",
-      "version": "v6.2.0",
-      "sha": "6044e13b5dc448c55e2357c09f80417699197238"
-    },
     "actions/setup-node@v6.3.0": {
       "repo": "actions/setup-node",
       "version": "v6.3.0",
@@ -100,30 +95,20 @@
       "version": "v2.0.3",
       "sha": "e95548e56dfa95d4e1a28d6f422fafe75c4c26fb"
     },
-
... (truncated)

[github-actions]

This issue was automatically closed because it expired on 2026-03-07T09:29:37.704Z.

Closed by Workflow