Bump the actions group across 1 directory with 6 updates

.github/workflows/comment-deployment-plan-pr.yaml

@@ -32,7 +32,7 @@ jobs:
       issues: read
       pull-requests: write
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - run: pip install requests
     - run: python extra-scripts/comment-deployment-plan-pr.py
       env:

.github/workflows/comment-test-link-merged-pr.yaml

@@ -20,7 +20,7 @@ jobs:
       actions: read
       pull-requests: write
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - run: pip install requests
     - run: python extra-scripts/comment-test-link-merged-pr.py
       env:

.github/workflows/deploy-grafana-dashboards.yaml

@@ -56,9 +56,9 @@ jobs:
         - cluster_name: heliophysics
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.13'
 
@@ -76,7 +76,7 @@ jobs:
       uses: mdgreenwald/[email protected]
 
     - name: Setup sops credentials to decrypt repo secrets
-      uses: google-github-actions/auth@v2
+      uses: google-github-actions/auth@v3
       with:
         credentials_json: ${{ secrets.GCP_KMS_DECRYPTOR_KEY }}
 

.github/workflows/deploy-hubs.yaml

@@ -73,12 +73,12 @@ jobs:
       prod-jobs: ${{ steps.generate-jobs.outputs.prod-jobs }}
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.13'
-    - uses: actions/setup-go@v5
+    - uses: actions/setup-go@v6
 
       # There will almost never be a cache hit on the cache key when this job is
       # run, as it is the first of all jobs in this workflow. An exception is if
@@ -96,7 +96,7 @@ jobs:
         go install github.com/google/go-jsonnet/cmd/[email protected]
 
     - name: Get merged/open PR labels
-      uses: actions/github-script@v7
+      uses: actions/github-script@v8
       id: pr-labels
       with:
           # Both pull_request and push can have triggered this job to run. A
@@ -255,7 +255,7 @@ jobs:
         jobs: ${{ fromJson(needs.generate-jobs.outputs.support-jobs) }}
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Setup deploy for ${{ matrix.jobs.cluster_name }}
       uses: ./.github/actions/setup-deploy
@@ -492,7 +492,7 @@ jobs:
       failure_heliophysics_staging: ${{ steps.declare-failure.outputs.failure_heliophysics_staging }}
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Setup deploy for ${{ matrix.jobs.cluster_name }} cluster
       uses: ./.github/actions/setup-deploy
@@ -630,7 +630,7 @@ jobs:
         jobs: ${{ fromJson(needs.filter-failed-staging.outputs.prod-jobs) }}
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Setup deploy for ${{ matrix.jobs.cluster_name }} cluster
       uses: ./.github/actions/setup-deploy

.github/workflows/ensure-uptime-checks.yaml

@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
       # Uptime checks are set up and managed via terraform
     - uses: hashicorp/setup-terraform@v3
@@ -40,7 +40,7 @@ jobs:
 
       # Authenticate with the correct KMS key that sops will use.
     - name: Setup sops credentials to decrypt repo secrets
-      uses: google-github-actions/auth@v2
+      uses: google-github-actions/auth@v3
       with:
         credentials_json: ${{ secrets.GCP_KMS_DECRYPTOR_KEY }}
 

.github/workflows/terraform-lint.yaml

@@ -9,9 +9,9 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - uses: hashicorp/setup-terraform@v3
-    - uses: terraform-linters/setup-tflint@v4
+    - uses: terraform-linters/setup-tflint@v5
     - name: Run terraform linter
       run: |
         cd terraform

.github/workflows/test-deployer-code.yaml

@@ -27,8 +27,8 @@ jobs:
   test-deployer:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.13'
     - name: Install dependencies

.github/workflows/test-docs.yaml

@@ -21,10 +21,10 @@ jobs:
   test-docs:
     runs-on: ubuntu-22.04
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
       with:
         fetch-depth: 0
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.13'
 

.github/workflows/validate-clusters.yaml

@@ -79,8 +79,8 @@ jobs:
       (github.event_name == 'pull_request' && contains(github.head_ref, fromJson('["dependabot", "pre-commit"]')) == false)
 
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.13'
 
@@ -210,11 +210,11 @@ jobs:
         jobs: ${{ fromJson(needs.generate-clusters-to-validate.outputs.cluster_matrix) }}
 
     steps:
-    - uses: actions/checkout@v4
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@v5
+    - uses: actions/setup-python@v6
       with:
         python-version: '3.13'
-    - uses: actions/setup-go@v5
+    - uses: actions/setup-go@v6
 
     - name: Install deployer module dependencies
       run: |