[skip-release] Update github-actions (major)

.github/workflows/backup.yml

@@ -12,7 +12,7 @@ jobs:
       id-token: write
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
     - id: auth
       name: 'Authenticate to Google Cloud'
       uses: 'google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093' # v3

.github/workflows/build-push-sh.yml

@@ -27,7 +27,7 @@ jobs:
           exit 1
         fi
 
-    - uses: 'actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8' # v6
+    - uses: 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' # v7
 
     - name: set vars
       shell: bash
@@ -45,15 +45,15 @@ jobs:
         service_account: ${{ secrets.GSA }}
         token_format: 'access_token'
 
-    - uses: 'docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef' # v3
+    - uses: 'docker/login-action@dbcb813823bdd20940b903addbd779551569679f' # v4
       name: 'Docker login'
       with:
         registry: 'us-docker.pkg.dev'
         username: 'oauth2accesstoken'
         password: '${{ steps.auth.outputs.access_token }}'
 
     - name: build
-      uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
+      uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
       with:
         context: .
         push: true

.github/workflows/build-push.yml

@@ -50,15 +50,15 @@ jobs:
           fi
 
       - name: ghcr Login
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           repository: libops/actions
           path: actions
@@ -74,10 +74,10 @@ jobs:
           TAG: ${{ inputs.tag }}
           DOCKER_PASSED_CONTEXT: ${{ inputs.context }}
 
-      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
 
       - name: build+push GHCR
-        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
+        uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
         with:
           context: ${{ inputs.context }}
           push: true
@@ -96,7 +96,7 @@ jobs:
       - build
     steps:
       - name: ghcr Login
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
+        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -111,14 +111,14 @@ jobs:
           service_account: ${{ secrets.GSA }}
           token_format: "access_token"
 
-      - uses: "docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef" # v3
+      - uses: "docker/login-action@dbcb813823bdd20940b903addbd779551569679f" # v4
         name: "GAR login"
         with:
           registry: "us-docker.pkg.dev"
           username: "oauth2accesstoken"
           password: "${{ steps.auth.outputs.access_token }}"
 
-      - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
         with:
           repository: libops/actions
           path: actions
@@ -134,7 +134,7 @@ jobs:
           TAG: ${{ inputs.tag }}
           DOCKER_PASSED_CONTEXT: ${{ inputs.context }}
 
-      - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
+      - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
 
       - name: merge platform images
         run: |

.github/workflows/bump-release.yaml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: "actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8" # v6
+        uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7
         with:
           fetch-depth: 0
 

.github/workflows/deploy.yml

@@ -35,7 +35,7 @@ jobs:
           exit 1
         fi
 
-    - uses: 'actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8' # v6
+    - uses: 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' # v7
 
     - name: set vars
       shell: bash

.github/workflows/libops.yml

@@ -33,7 +33,7 @@ jobs:
           exit 1
         fi
 
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
 
     - id: 'auth'
       name: 'Authenticate to Google Cloud'
@@ -44,7 +44,7 @@ jobs:
         service_account: ${{ secrets.GSA }}
         token_format: 'access_token'
 
-    - uses: 'docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef' # v3
+    - uses: 'docker/login-action@dbcb813823bdd20940b903addbd779551569679f' # v4
       name: 'Docker login'
       with:
         registry: 'us-docker.pkg.dev'

.github/workflows/ping.yml

@@ -12,7 +12,7 @@ jobs:
       id-token: write
     runs-on: ubuntu-24.04
     steps:
-    - uses: 'actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8' # v6
+    - uses: 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' # v7
     - id: auth
       name: 'Fetch remote URLs'
       uses: 'google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093' # v3

.github/workflows/pr-comment-url.yml

@@ -24,7 +24,7 @@ jobs:
     needs: get-url
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
         with:
           script: |
             github.rest.issues.createComment({

.github/workflows/set-developer.yml

@@ -18,7 +18,7 @@ jobs:
       contents: write
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
       with:
         fetch-depth: 0
     - name: Add developer

.github/workflows/sync-db.yml

@@ -15,7 +15,7 @@ jobs:
       id-token: write
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
+    - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
     - id: auth
       name: 'Fetch remote URLs'
       uses: 'google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093' # v3