Update GitHub Actions (major)

.github/workflows/browser-extension-stores.yml

@@ -81,7 +81,7 @@ jobs:
     if: inputs.chrome
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: ${{ inputs.artifact }}
       - name: Upload to Chrome Web Store
@@ -100,8 +100,8 @@ jobs:
     if: inputs.firefox
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@v7
+      - uses: actions/download-artifact@v8
         with:
           name: ${{ inputs.artifact }}
           path: ${{ runner.temp }}/extension
@@ -125,7 +125,7 @@ jobs:
     if: inputs.edge
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: ${{ inputs.artifact }}
       - name: Publish to Microsoft Edge Add-ons

.github/workflows/bump-version.yml

@@ -69,7 +69,7 @@ jobs:
             exit 1
           fi
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - id: bump
         name: Raise the version

.github/workflows/docker-release.yml

@@ -98,7 +98,7 @@ jobs:
       cache: ${{ steps.plan.outputs.cache }}
       artifact: ${{ steps.plan.outputs.artifact }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - id: version
         name: Version
@@ -179,24 +179,24 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - if: matrix.qemu
-        uses: docker/setup-qemu-action@v3
-      - uses: docker/setup-buildx-action@v3
+        uses: docker/setup-qemu-action@v4
+      - uses: docker/setup-buildx-action@v4
       - name: Log in to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ inputs.dockerhub-user }}
           password: ${{ secrets.DOCKER_PAT }}
       - name: Log in to GHCR
         if: inputs.ghcr || inputs.cache
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ needs.prepare.outputs.names }}
       # The registry cache, and the Actions cache of the default branch as before (the CI's image
@@ -220,7 +220,7 @@ jobs:
 
       # Pushed by digest only; the merge job puts the tags on the multi-arch list.
       - id: build
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: ${{ inputs.context }}
           file: ${{ inputs.dockerfile }}
@@ -235,7 +235,7 @@ jobs:
         run: |
           mkdir -p "$RUNNER_TEMP/digests"
           touch "$RUNNER_TEMP/digests/${DIGEST#sha256:}"
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: ${{ needs.prepare.outputs.artifact }}${{ matrix.pair }}
           path: ${{ runner.temp }}/digests/*
@@ -250,26 +250,26 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           path: ${{ runner.temp }}/digests
           pattern: ${{ needs.prepare.outputs.artifact }}*
           merge-multiple: true
-      - uses: docker/setup-buildx-action@v3
+      - uses: docker/setup-buildx-action@v4
       - name: Log in to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ inputs.dockerhub-user }}
           password: ${{ secrets.DOCKER_PAT }}
       - name: Log in to GHCR
         if: inputs.ghcr
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
       - id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ needs.prepare.outputs.names }}
           tags: |
@@ -293,7 +293,7 @@ jobs:
         run: docker buildx imagetools inspect "$IMAGE:$TAG"
 
       # A pre-release keeps the description of the last release
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         if: inputs.readme != '' && needs.prepare.outputs.prerelease != 'true'
       - name: README for Docker Hub
         if: inputs.readme != '' && needs.prepare.outputs.prerelease != 'true'
@@ -336,7 +336,7 @@ jobs:
     steps:
       - name: Release files
         if: inputs.release-artifact != ''
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: ${{ inputs.release-artifact }}
           path: release-files

.github/workflows/github-release.yml

@@ -35,7 +35,7 @@ jobs:
     outputs:
       version: ${{ steps.version.outputs.version }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         if: inputs.version-file != ''
 
       - id: version
@@ -66,7 +66,7 @@ jobs:
 
       - name: Release files
         if: inputs.release-artifact != ''
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: ${{ inputs.release-artifact }}
           path: ${{ runner.temp }}/release-files

.github/workflows/lint.yml

@@ -15,7 +15,7 @@ jobs:
   actionlint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: actionlint
         env:
           ACTIONLINT_VERSION: 1.7.7
@@ -32,7 +32,7 @@ jobs:
     steps:
       - id: image
         run: echo "image=$ImageVersion" >> "$GITHUB_OUTPUT"
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - id: first
         uses: ./actions/apt-install
         with:
@@ -44,7 +44,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - id: second
         uses: ./actions/apt-install
         with:

.github/workflows/move-tag.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/main'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Move ${{ inputs.tag }} to ${{ github.sha }}
         env:
           TAG: ${{ inputs.tag }}

.github/workflows/screenshots.yml

@@ -86,7 +86,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # The npm package brings the binary without curl or unzip, which the image lacks
       - name: Bun

.github/workflows/tested-on-main.yml

@@ -34,7 +34,7 @@ jobs:
     outputs:
       tested: ${{ steps.check.outputs.tested }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 10
       - id: check

.github/workflows/vscode-extension-publish.yml

@@ -31,10 +31,10 @@ jobs:
   publish:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: 22
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: ${{ inputs.artifact }}
           path: ${{ runner.temp }}/vsix

actions/apt-install/action.yml

@@ -35,7 +35,7 @@ runs:
         echo "key=apt-$ImageOS-$ImageVersion-$RUNNER_ARCH-$hash" >> "$GITHUB_OUTPUT"
 
     - id: cache
-      uses: actions/cache/restore@v4
+      uses: actions/cache/restore@v6
       with:
         path: ${{ runner.temp }}/apt-cache
         key: ${{ steps.key.outputs.key }}
@@ -72,7 +72,7 @@ runs:
         sudo chown -R "$(id -u):$(id -g)" "$CACHE"
 
     - if: steps.cache.outputs.cache-hit != 'true'
-      uses: actions/cache/save@v4
+      uses: actions/cache/save@v6
       with:
         path: ${{ runner.temp }}/apt-cache
         key: ${{ steps.key.outputs.key }}

actions/docker-build/action.yml

@@ -24,8 +24,8 @@ outputs:
 runs:
   using: composite
   steps:
-    - uses: docker/setup-buildx-action@v3
-    - uses: docker/login-action@v3
+    - uses: docker/setup-buildx-action@v4
+    - uses: docker/login-action@v4
       continue-on-error: true
       with:
         registry: ghcr.io
@@ -41,7 +41,7 @@ runs:
         echo "ref=ghcr.io/$repo-buildcache:$pair" >> "$GITHUB_OUTPUT"
         echo "pair=$pair" >> "$GITHUB_OUTPUT"
     - id: build
-      uses: docker/build-push-action@v6
+      uses: docker/build-push-action@v7
       with:
         context: ${{ inputs.context }}
         file: ${{ inputs.dockerfile }}

actions/playwright-image/action.yml

@@ -22,7 +22,7 @@ runs:
   steps:
     # Only the lockfile, when the job hasn't checked out the repository itself
     - if: hashFiles(inputs.lockfile) == ''
-      uses: actions/checkout@v4
+      uses: actions/checkout@v7
       with:
         sparse-checkout: ${{ inputs.lockfile }}
         sparse-checkout-cone-mode: false