Update actions dependencies to not depend on Node 20

.github/workflows/create_branch.yml

@@ -21,7 +21,7 @@ jobs:
     steps:
       # Checkout the tag corresponding to patch 0 for the given version
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
         with:
           ssh-key: ${{ secrets.DEPLOY_KEY }}
           fetch-tags: true

.github/workflows/metrics_analysis.yml

@@ -15,7 +15,7 @@ jobs:
 
     steps:
     - name: Checkout code
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6.0.2
       with:
         fetch-depth: 0  # Need full history for git diff
 
@@ -51,7 +51,7 @@ jobs:
         fi
 
     - name: Comment on PR
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9.0.0
       continue-on-error: true
       with:
         github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -88,7 +88,7 @@ jobs:
           });
 
     - name: Add inline comments for outliers
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9.0.0
       if: steps.check-changes.outputs.SIGNIFICANT_CHANGES == 'true'
       continue-on-error: true
       with:

.github/workflows/nightly.yml

@@ -24,7 +24,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         id: setup-base
         uses: ./actions/setup-base-env
@@ -56,7 +56,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: Calculate versions
@@ -79,7 +79,7 @@ jobs:
     timeout-minutes: 40
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: Setup FDB
@@ -98,7 +98,7 @@ jobs:
           gradle_args: -PreleaseBuild=false -PpublishBuild=false -Ptests.mixedModeVersion=${{ matrix.version }}
           report_name: mixed-mode-${{ matrix.version }}-test-reports
       - name: Publish Coverage Data
-        uses: actions/upload-artifact@v4.6.0
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: mixed-mode-${{ matrix.version }}-coverage-data
           path: |
@@ -125,11 +125,11 @@ jobs:
       contents: read
     steps:
       - name: Checkout HEAD sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: 'Download results'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8.0.0
         with:
           pattern: 'mixed-mode-*-test-reports'
       - name: Generate mixed mode results
@@ -141,7 +141,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: Setup FDB

.github/workflows/pr_labels.yml

@@ -15,11 +15,11 @@ jobs:
       pull-requests: read
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
         with:
           sparse-checkout: build/release-notes-config.json
       - name: Check Labels
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9.0.0
         with:
           script: |
             // Gather required labels from release notes configuration

.github/workflows/pr_mixed_mode.yml

@@ -15,7 +15,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: Calculate versions
@@ -36,7 +36,7 @@ jobs:
     timeout-minutes: 40
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: Setup FDB
@@ -48,7 +48,7 @@ jobs:
           gradle_args: -PreleaseBuild=false -PpublishBuild=false -Ptests.mixedModeVersion=${{ matrix.version }}
           report_name: mixed-mode-${{ matrix.version }}-test-reports
       - name: Publish Coverage Data
-        uses: actions/upload-artifact@v4.6.0
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: mixed-mode-${{ matrix.version }}-coverage-data
           path: |
@@ -64,11 +64,11 @@ jobs:
       contents: read
     steps:
       - name: Checkout HEAD sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: 'Download results'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8.0.0
         with:
           pattern: 'mixed-mode-*-test-reports'
       - name: Generate mixed mode results

.github/workflows/pull_request.yml

@@ -25,7 +25,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: Run Gradle Build
@@ -45,7 +45,7 @@ jobs:
     timeout-minutes: 40
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: Setup FDB
@@ -57,7 +57,7 @@ jobs:
           gradle_args: -PreleaseBuild=false -PpublishBuild=false
           report_name: ${{ matrix.subproject }}-test-reports
       - name: Publish Coverage Data
-        uses: actions/upload-artifact@v4.6.0
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: ${{ matrix.subproject }}-coverage-data
           path: |
@@ -75,7 +75,7 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: Setup FDB
@@ -98,7 +98,7 @@ jobs:
           gradle_args: -PreleaseBuild=false -PpublishBuild=false
           report_name: other-test-reports
       - name: Publish Coverage Data
-        uses: actions/upload-artifact@v4.6.0
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: other-coverage-data
           path: |
@@ -116,43 +116,44 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Checkout HEAD sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       # It looks like, if you try to download them all as a pattern, the nested directories get stripped
       # so the coverage data (for e.g. lucene) does not end up in the appropirate subproject directory
       - name: 'Download lucene'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8.0.0
         with:
           name: fdb-record-layer-lucene-coverage-data
       - name: 'Download extensions'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8.0.0
         with:
           name: fdb-extensions-coverage-data
       - name: 'Download core'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8.0.0
         with:
           name: fdb-record-layer-core-coverage-data
       - name: 'Download yaml'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8.0.0
         with:
           name: yaml-tests-coverage-data
       - name: 'Download other'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8.0.0
         with:
           name: other-coverage-data
       - name: Run JaCoCo Report
         uses: ./actions/run-gradle
         with:
           gradle_command: codeCoverageReport
       - name: Publish Coverage Report
-        uses: actions/upload-artifact@v4.6.0
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: coverage-report
           path: |
             ${{ github.workspace }}/.out/reports/jacoco/codeCoverageReport/
       - name: Add Coverage Summary
-        uses: madrapps/jacoco-report@e4bbaf00a0b8920cb86a448ae3ec0fc6f6bfeacc
+        # v1.7.2
+        uses: madrapps/jacoco-report@50d3aff4548aa991e6753342d9ba291084e63848
         with:
           paths: |
             ${{ github.workspace }}/.out/reports/jacoco/codeCoverageReport/codeCoverageReport.xml

.github/workflows/release.yml

@@ -19,7 +19,7 @@ jobs:
       update-type: ${{ steps.update-type.outputs.result }}
     steps:
       - name: Calculate update type
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9.0.0
         id: update-type
         with:
           script: |
@@ -48,7 +48,7 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       # Increment the version here so that the version used in the checks matches the eventually published version.
@@ -71,7 +71,7 @@ jobs:
     timeout-minutes: 40
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: Setup FDB
@@ -89,7 +89,7 @@ jobs:
           gradle_args: -PreleaseBuild=true -PpublishBuild=false
           report_name: ${{ matrix.subproject }}-test-reports
       - name: Publish Coverage Data
-        uses: actions/upload-artifact@v4.6.0
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: ${{ matrix.subproject }}-coverage-data
           path: |
@@ -106,7 +106,7 @@ jobs:
     timeout-minutes: 60
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: Setup FDB
@@ -133,7 +133,7 @@ jobs:
           gradle_args: -PreleaseBuild=true -PpublishBuild=false
           report_name: other-test-reports
       - name: Publish Coverage Data
-        uses: actions/upload-artifact@v4.6.0
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: other-coverage-data
           path: |
@@ -152,7 +152,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: Calculate versions
@@ -171,7 +171,7 @@ jobs:
     timeout-minutes: 40
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: Setup FDB
@@ -189,7 +189,7 @@ jobs:
           gradle_args: -PreleaseBuild=true -PpublishBuild=false -Ptests.mixedModeVersion=${{ matrix.version }}
           report_name: mixed-mode-${{ matrix.version }}-test-reports
       - name: Publish Coverage Data
-        uses: actions/upload-artifact@v4.6.0
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: mixed-mode-${{ matrix.version }}-coverage-data
           path: |
@@ -205,11 +205,11 @@ jobs:
       contents: read
     steps:
       - name: Checkout HEAD sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: Setup Base Environment
         uses: ./actions/setup-base-env
       - name: 'Download results'
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8.0.0
         with:
           pattern: 'mixed-mode-*-test-reports'
       - name: Generate mixed mode results
@@ -218,7 +218,7 @@ jobs:
       # so that "mixed-mode-results" gets passed around correctly
       - name: Upload mixed mode results
         id: mixed_mode_results
-        uses: actions/upload-artifact@v4.6.0
+        uses: actions/upload-artifact@v7.0.1
         with:
           name: mixed-mode-results
           path: mixed-mode-results.md
@@ -234,7 +234,7 @@ jobs:
       pull-requests: write # We create a pull request if committing the release notes updates fails
     steps:
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
         with:
           ssh-key: ${{ secrets.DEPLOY_KEY }}
           fetch-tags: true
@@ -270,7 +270,7 @@ jobs:
       # We want to do this before anything else, because if the later steps fail, we want to make sure that the full
       # change log includes all changes, even if they reference a release that was never actually published.
       - name: Download mixed mode results
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8.0.0
         with:
           name: mixed-mode-results
       - name: echo results
@@ -369,7 +369,7 @@ jobs:
         run: echo "${{ needs.get-update-type.outputs.update-type }}"
       - name: Cache Python Environment
         if: needs.get-update-type.outputs.update-type == 'BUILD'
-        uses: actions/cache@v4
+        uses: actions/cache@v5.0.4
         with:
           path: docs/sphinx/.venv
           key: ${{ runner.os }}-sphinx-python-${{ steps.setup-base.outputs.python-version }}-${{ hashFiles('docs/sphinx/requirements.txt') }}

.github/workflows/teamscale_upload.yml

@@ -19,9 +19,9 @@ jobs:
       # This checks out the latest commit on main, not teh PRs head
       # This is needed to get the teamscale-upload action
       - name: Checkout sources
-        uses: actions/checkout@v4.2.2
+        uses: actions/checkout@v6.0.2
       - name: 'Download artifact'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9.0.0
         with:
           script: |
             let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({

actions/gradle-test/action.yml

@@ -54,7 +54,7 @@ runs:
       echo "SUCCESS" >> test-reports/overall.txt
   - name: Publish Test Reports
     if: ${{ !cancelled() }}
-    uses: actions/upload-artifact@v4.6.0
+    uses: actions/upload-artifact@v7.0.1
     with:
       name: ${{ inputs.report_name }}
       if-no-files-found: ignore