Deps: update the version of the used actions

container-build-push-generic/action.yaml

@@ -106,7 +106,7 @@ runs:
 
     - name: Build and push container image
       id: build-and-push
-      uses: docker/build-push-action@v5
+      uses: docker/build-push-action@v6
       with:
         annotations: ${{ steps.meta.outputs.annotations }}
         context: ${{ inputs.build-context }}
@@ -142,7 +142,7 @@ runs:
 
     - name: Upload sbom sarif file
       if: ${{ github.event_name == 'pull_request' && inputs.scout-user && inputs.scout-password && contains(inputs.scout-command, 'sbom') }}
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: ${{ steps.image.outputs.name }}.sarif
         path: /tmp/${{ steps.image.outputs.name }}.sarif

container-signing/README.md

@@ -53,7 +53,7 @@ jobs:
       - uses: docker/metadata-action@v4
         id: meta
         ...
-      - uses: docker/build-push-action@v3
+      - uses: docker/build-push-action@v6
         id: build-and-push
         ...
       - name: Container signing

conventional-commits/action.yml

@@ -38,7 +38,7 @@ runs:
         echo "::debug::PR base sha ${{ github.event.pull_request.base.sha }}"
       shell: bash
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         # fetch all commits of the base-ref. without all commits it's not possible to find the common ancestor
         fetch-depth: 0

doc-coverage-clang/action.yml

@@ -30,6 +30,6 @@ runs:
         python -m coverxygen --src-dir ${{ github.workspace }} \
         --xml-dir build/doc/generated/xml/ --output lcov.info
     - name: Upload documentation coverage to codecov
-      uses: codecov/codecov-action@v1
+      uses: codecov/codecov-action@v4
       with:
         files: lcov.info

helm-login/action.yaml

@@ -33,7 +33,7 @@ runs:
     - name: Install helm
       if: inputs.helm-version
       id: helm
-      uses: azure/setup-helm@v3
+      uses: azure/setup-helm@v4
       with:
         version: ${{ inputs.helm-version }}
         token: ${{ inputs.helm-token }}

lint-golang/action.yml

@@ -27,6 +27,6 @@ runs:
       shell: bash
       run: ${{ inputs.generate }}
     - name: Use the linter
-      uses: golangci/golangci-lint-action@v3
+      uses: golangci/golangci-lint-action@v6
       with:
         version: ${{ inputs.golangci-lint-version }}

npm-build-push/README.md

@@ -10,7 +10,7 @@ jobs:
     name: Build and push npm pkg
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Build and push npm pkg
         uses: greenbone/actions/npm-build-push@v3
         with:

npm-build-push/action.yaml

@@ -26,7 +26,7 @@ runs:
   steps:
     - name: Setup Node.js
       if: inputs.version
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@v4
       with:
           node-version: ${{ inputs.version }}
           registry-url: ${{ inputs.registry-url }}

pr-conventional-commit-labeler/action.yml

@@ -32,7 +32,7 @@ runs:
         echo "::debug::pr number: ${{ github.event.pull_request.number }}"
       shell: bash
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
     - name: Set up Python and Poetry
       uses: greenbone/actions/poetry@v3
       with:

sbom-upload/action.yml

@@ -28,12 +28,12 @@ runs:
         chmod +x $RUNNER_TEMP/sbom-tool
         $RUNNER_TEMP/sbom-tool generate -b . -bc . -pn ${{ github.repository }} -pv 1.0.0 -ps "Greenbone AG" -nsb https://greenbone.net -V Verbose
       shell: bash
-    - uses: actions/upload-artifact@v3
+    - uses: actions/upload-artifact@v4
       with:
         name: sbom
         path: _manifest/spdx_2.2
     - name: SBOM upload
-      uses: advanced-security/spdx-dependency-submission-action@v0.0.1
+      uses: advanced-security/spdx-dependency-submission-action@v0.1.1
       with:
         filePath: "_manifest/spdx_2.2/"
     - name: Setup github user

update-header/action.yaml

@@ -37,7 +37,7 @@ branding:
 runs:
   using: "composite"
   steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
       with:
         ref: ${{ inputs.target }}
     - name: Set up pontos