chore(ci): upgrade all GitHub Actions to latest stable versions

[poyrazK]

Upgrades all workflows to use the latest verified action versions (Checkout v6, Setup-Go v6, golangci-lint v9, sonarqube v7).

Closes #23 (remaining CI issues)

Summary by CodeRabbit

• Chores
  • Updated CI/CD workflow tooling to newer versions across all pipeline stages for improved stability and security.
  • Increased benchmark alert threshold from 150% to 200%, reducing alert sensitivity for benchmark result fluctuations.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

Note

Other AI code review bot(s) detected

CodeRabbit has detected other AI code review bot(s) in this pull request and will avoid duplicating their findings in the review comments. This may lead to a less comprehensive review.

📝 Walkthrough

Walkthrough

Updated GitHub Actions versions across nine workflow files: primarily actions/checkout v4→v6 and actions/setup-go v5→v6; additional specific action version bumps and one benchmark alert-threshold parameter change. No workflow control flow or public API changes.

Changes

Cohort / File(s)	Summary
Checkout + setup-go (standard) .github/workflows/benchmarks.yml, .github/workflows/code-quality.yml, .github/workflows/coverage.yml, .github/workflows/load-tests.yml	Updated actions/checkout v4→v6 and actions/setup-go v5→v6. In benchmarks.yml also increased alert-threshold from 150% to 200%.
CI (checkout, setup-go, linter) .github/workflows/ci.yml	Updated actions/checkout v4→v6 and actions/setup-go v5→v6; updated golangci/golangci-lint-action to pinned v1.64.8.
Contract tests (checkout, setup-go, schemathesis) .github/workflows/contract-tests.yml	Updated actions/checkout v4→v6, actions/setup-go v5→v6, and schemathesis/action v1→v2.
Sonar (checkout, setup-go, sonarqube) .github/workflows/sonar.yml	Updated actions/checkout v4→v6, actions/setup-go v5→v6, and sonarsource/sonarqube-scan-action v4→v6.
Checkout-only .github/workflows/codeql.yml, .github/workflows/security.yml	Updated actions/checkout v4→v6 (no other version or parameter changes).

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Poem

🐰
Hopping through YAML with a twitch of my nose,
Bumping the actions where new version grows.
Checkout and Go with a spring in their feet,
Benchmarks more patient — the threshold’s more sweet.
Pipelines refreshed — a tiny rabbit's tweet.

🚥 Pre-merge checks | ✅ 3 | ❌ 2

❌ Failed checks (2 warnings)

Check name	Status	Explanation	Resolution
Linked Issues check	⚠️ Warning	The PR claims to close issue #23 which requires context.Context support for LibvirtClient, but the changes only upgrade CI actions; no libvirt code changes are present.	Either implement the required LibvirtClient context changes to meet issue #23 requirements, or remove the issue linkage and retarget this as a standalone CI maintenance PR.
Out of Scope Changes check	⚠️ Warning	All changes are strictly CI workflow upgrades unrelated to the linked issue #23 objectives of adding context support to LibvirtClient.	Separate this CI upgrade work into an independent PR without linking issue #23, or include the actual LibvirtClient context implementation changes required by the issue.

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The PR title accurately describes the main change: upgrading GitHub Actions versions in CI workflows.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

This pull request attempts to upgrade GitHub Actions across multiple workflow files to newer versions that may not exist. The PR updates actions/checkout from v4 to v6, actions/setup-go from v5 to v6, golangci-lint-action from v6 to v9, sonarqube-scan-action from v4 to v7, and schemathesis/action from v1 to v2.

Changes:

• Updated actions/checkout to v6 across 9 workflow files
• Updated actions/setup-go to v6 across 8 workflow files
• Updated golangci-lint-action to v9 in ci.yml
• Updated sonarqube-scan-action to v7 in sonar.yml
• Updated schemathesis/action to v2 in contract-tests.yml

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.github/workflows/sonar.yml	Updates checkout to v6, setup-go to v6, and sonarqube-scan-action to v7
.github/workflows/security.yml	Updates checkout to v6 in two jobs
.github/workflows/load-tests.yml	Updates checkout to v6 and setup-go to v6
.github/workflows/coverage.yml	Updates checkout to v6 and setup-go to v6
.github/workflows/contract-tests.yml	Updates checkout to v6, setup-go to v6, and schemathesis/action to v2
.github/workflows/codeql.yml	Updates checkout to v6
.github/workflows/code-quality.yml	Updates checkout to v6 and setup-go to v6
.github/workflows/ci.yml	Updates checkout to v6 (5 occurrences), setup-go to v6 (2 occurrences), and golangci-lint-action to v9
.github/workflows/benchmarks.yml	Updates checkout to v6 and setup-go to v6

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 9 out of 9 changed files in this pull request and generated 1 comment.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

This change increases the performance alert threshold from 150% to 200%, which is unrelated to upgrading GitHub Actions versions as stated in the PR title and description. This change allows 100% performance degradation before alerting (instead of 50%). This significant change to performance monitoring should be in a separate PR with proper justification.

Suggested change

	alert-threshold: '200%'
	alert-threshold: '150%'

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud