update actions versions

.github/CODEOWNERS

@@ -1,3 +1,16 @@
-* @im-practices/swat
-/.github/CODEOWNERS @im-practices/swat
-/workflow-templates/im-test-k6-* @im-practices/swat @im-practices/sre-strategy @im-practices/devops
+# Syntax notes:
+# - The syntax matches most of the same rules as gitignore files.
+# - https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/about-code-owners#codeowners-syntax
+# - Each line is a file pattern followed by one or more owners (@user or @org/team-slug).
+# - Prefer team owners over individuals.
+# - Paths are case sensitive.
+# - Order is important.  The last matching pattern takes the most precedence.
+
+# These owners will be the default owners for everything in the repo. Unless a later match takes
+# precedence, these teams will be requested for review when someone opens a pull request.
+# Draft PRs do not automatically request reviews until they are marked as Ready for Review.
+# If the repo's Branch Protection Rule requires code owner reviews, one of these team members
+# must sign off before a PR can be merged.
+* @im-practices/devops-delta @im-practices/swat
+.github/CODEOWNERS @im-practices/devops-delta-admin
+.github/workflows/* @im-practices/devops-delta @im-practices/swat

.github/workflows/im-reusable-finish-deployment-workflow.yml

@@ -117,7 +117,7 @@ jobs:
     environment: ${{ inputs.gh-secrets-environment }}
     steps:
       - name: Check if workflow should post to teams
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             // Some teams have these as a secret and some as a var, allow either way but if not present do not post
@@ -131,7 +131,7 @@ jobs:
             }
 
       - name: Print inputs
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             function printInput(inputName, inputValue, isMultilineInput){
@@ -192,7 +192,7 @@ jobs:
       - name: Configure facts for team's notification channel
         if: always()
         id: team-channel-facts
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const rawFacts = process.env.FACTS;
@@ -232,7 +232,7 @@ jobs:
       - name: Determine if a post should be made in Deployment Notifications channel
         if: always()
         id: post-to-deployment-channel
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const postInProd = ${{ inputs.post-status-in-deployment-notifications-channel }};
@@ -259,7 +259,7 @@ jobs:
       - name: Configure facts for Deployment Notifications channel
         if: always() && steps.post-to-deployment-channel.outputs.post == 'true'
         id: deployment-channel-facts
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const rawFacts = process.env.FACTS;

.github/workflows/im-reusable-setup-deployment-workflow.yml

@@ -56,7 +56,7 @@ jobs:
 
     steps:
       - name: Print inputs
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             function printInput(inputName, inputValue, isMultilineInput){
@@ -82,7 +82,7 @@ jobs:
 
       - name: Construct Workflow Summary
         id: summary
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             let summary = process.env.SUMMARY;
@@ -110,7 +110,7 @@ jobs:
       # Also use fetch-depth: 0 to retrieve the history and tags so we can check if a tag is
       # exists, is reachable from the default branch and is production ready.
       - name: Checkout Repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.default-branch }}
           fetch-depth: 0
@@ -122,7 +122,7 @@ jobs:
 
       - name: Determine if deployment is to Prod
         id: check-env
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const prodEnvsRaw = '${{ inputs.production-environments }}';