chore(workflows): bump workflow deps versions

Author: locao

.github/workflows/build_and_test_with_resty_events.yml

@@ -17,7 +17,7 @@ on:
 jobs:
   build:
     name: CI using lua-resty-events
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     strategy:
       matrix:
         openresty-version: [1.19.9.1, 1.21.4.3, 1.25.3.1]
@@ -34,9 +34,9 @@ jobs:
         env:
           OPENRESTY_VER: ${{ matrix.openresty-version }}
           RESTY_EVENTS_VER: 0.3.0
-          LUAROCKS_VER: 3.9.0
-          OPENSSL_VER: 1.1.1q
-          PCRE_VER: 8.45
+          LUAROCKS_VER: 3.12.0
+          OPENSSL_VER: 3.4.1
+          PCRE_VER: 10.45
         run: |
           echo "INSTALL_ROOT=/home/runner/work/cache/install-root" >> $GITHUB_ENV
           echo "DOWNLOAD_ROOT=/home/runner/work/cache/download-root" >> $GITHUB_ENV
@@ -48,10 +48,10 @@ jobs:
           echo "LD_LIBRARY_PATH=$HOME/install-root/lib:$LD_LIBRARY_PATH" >> $GITHUB_ENV
 
       - name: Checkout lua-resty-healthcheck
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Lookup build cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         id: cache-deps
         with:
           path: |
@@ -72,7 +72,7 @@ jobs:
           make install_sw
 
       - name: Checkout lua-resty-events
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: Kong/lua-resty-events
           ref: refs/tags/0.3.0

.github/workflows/build_and_test_with_worker_events.yml

@@ -16,10 +16,10 @@ on:
 jobs:
   build:
     name: CI using lua-resty-worker-events
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
     strategy:
       matrix:
-        openresty-version: [1.21.4.3]
+        openresty-version: [1.27.1.2]
 
     steps:
       - name: Update and install OS dependencies
@@ -36,17 +36,17 @@ jobs:
           echo "/usr/local/openresty/nginx/sbin" >> $GITHUB_PATH
 
       - name: Checkout lua-resty-healthcheck
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Install OpenResty ${{ matrix.openresty-version }}
         env:
           OPENRESTY_VER: ${{ matrix.openresty-version }}
         run: |
           sudo apt-get -y install --no-install-recommends wget gnupg ca-certificates
-          wget -O - https://openresty.org/package/pubkey.gpg | sudo apt-key add -
-          echo "deb http://openresty.org/package/ubuntu $(lsb_release -sc) main" | sudo tee /etc/apt/sources.list.d/openresty.list
+          wget -O - https://openresty.org/package/pubkey.gpg | sudo gpg --dearmor -o /usr/share/keyrings/openresty.gpg
+          echo "deb [arch=$(dpkg --print-architecture) signed-by=/usr/share/keyrings/openresty.gpg] http://openresty.org/package/ubuntu $(lsb_release -sc) main" | sudo tee /etc/apt/sources.list.d/openresty.list > /dev/null
           sudo apt-get update
-          sudo apt-get -y install openresty=$OPENRESTY_VER-1~focal1
+          sudo apt-get -y install openresty=$OPENRESTY_VER-1~jammy1
 
       - name: Install LuaRocks
         run: sudo apt-get install -y luarocks
@@ -63,7 +63,7 @@ jobs:
           cpanm --notest Test::Nginx
 
       - name: Checkout lua-resty-healthcheck
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Install lua-resty-healthcheck
         run: sudo luarocks make

.github/workflows/lint.yml

@@ -30,7 +30,7 @@ jobs:
 
     steps:
     - name: Checkout source code
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     # Optional step to run on only changed files
     - name: Get changed files
@@ -42,7 +42,7 @@ jobs:
 
     - name: Lua Check
       if: steps.changed-files.outputs.any_changed == 'true'
-      uses: Kong/public-shared-actions/code-check-actions/lua-lint@c03e30a36e8a2dde5cbd463229a96aaad7ccad24
+      uses: Kong/public-shared-actions/code-check-actions/lua-lint@fa3d956324c2633b23cc3825b3403d91460675a1 # 4.1.4
       with:
         additional_args: '--no-default-config --config .luacheckrc'
         files: ${{ steps.changed-files.outputs.all_changed_files }}

.github/workflows/sast.yml

@@ -32,5 +32,5 @@ jobs:
     if: (github.actor != 'dependabot[bot]')
 
     steps:
-      - uses: actions/checkout@v3
-      - uses: Kong/public-shared-actions/security-actions/semgrep@c03e30a36e8a2dde5cbd463229a96aaad7ccad24
+      - uses: actions/checkout@v4
+      - uses: Kong/public-shared-actions/security-actions/semgrep@fa3d956324c2633b23cc3825b3403d91460675a1 # 4.1.4