ci(deps): update github actions

Author: renovate[bot]

.github/workflows/astarte-apps-build-workflow.yaml

@@ -17,7 +17,7 @@ on:
 jobs:
   warmup:
     name: Cache warmup
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - uses: team-alembic/staple-actions/actions/mix-compile@a74b3b61209d35d45526df174766632f8aee03ed
@@ -28,7 +28,7 @@ jobs:
 
   formatter:
     name: Formatting
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -40,7 +40,7 @@ jobs:
 
   credo:
     name: Credo
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -52,7 +52,7 @@ jobs:
 
   dialyzer:
     name: Dialyzer
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -73,7 +73,7 @@ jobs:
     name: Test
     needs:
       - warmup
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:

.github/workflows/astarte-build-workflow.yaml

@@ -6,7 +6,7 @@ on:
 jobs:
   astarte-build:
     name: Astarte build
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       matrix:
         app:
@@ -29,7 +29,7 @@ jobs:
             service: astarte_trigger_engine
             tag: astarte/astarte_trigger_engine:snapshot
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Setup Docker Buildx
         uses: docker/setup-buildx-action@v3
       - name: Build branch slug env variable (job-scoped)
@@ -51,7 +51,7 @@ jobs:
       # Upload the built image as an artifact to be shared with other workflows
       # we use the commit SHA to avoid collisions between different workflow runs
       - name: Upload ${{ matrix.app.name }} artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
         with:
           # Give each image a unique artifact name to avoid clashes across matrix jobs
           name: astarte-images-${{ matrix.app.name }}

.github/workflows/astarte-e2e-build-workflow.yaml

@@ -10,9 +10,9 @@ env:
 jobs:
   end-to-end-build:
     name: End-to-end build
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: docker/setup-buildx-action@v3
       - name: Build branch slug env variable (job-scoped)
         run: |
@@ -29,7 +29,7 @@ jobs:
           cache-from: type=gha,scope=astarte_e2e-${{ env.BRANCH_SLUG }}
           cache-to: type=gha,mode=max,scope=astarte_e2e-${{ env.BRANCH_SLUG }}
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
         with:
           name: astarte-e2e-image
           path: ${{ runner.temp }}/astarte-e2e.tar

.github/workflows/astarte-end-to-end-test-workflow.yaml

@@ -37,20 +37,20 @@ jobs:
   end-to-end-test:
     needs: [e2e-build, astarte-build]
     name: End-to-end Test
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Initialize docker compose files
         run: docker run -v $(pwd)/compose:/compose astarte/docker-compose-initializer
       - name: Restore astarte images
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8
         with:
           # Download all app images; merge them into the same directory for loading
           pattern: astarte-images-*
           merge-multiple: true
           path: ${{ runner.temp }}
       - name: Restore astarte e2e image
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8
         with:
           name: astarte-e2e-image
           path: ${{ runner.temp }}
@@ -134,7 +134,7 @@ jobs:
         working-directory: .tmp/repos/astarte
         run: docker run -v $(pwd)/compose:/compose astarte/docker-compose-initializer
       - name: Restore astarte images
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8
         with:
           pattern: astarte-images-*
           merge-multiple: true
@@ -153,7 +153,7 @@ jobs:
       - uses: mozilla-actions/sccache-action@v0.0.9
       - name: Cache container build
         id: cache-container
-        uses: actions/cache@v4.3.0
+        uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
         with:
           path: .tmp/cache/containers
           key: ${{ runner.os }}-${{ hashFiles('justfile', 'scripts/**/*.sh', 'containers/**') }}

.github/workflows/astarte-libs-build-workflow.yaml

@@ -18,7 +18,7 @@ on:
 jobs:
   warmup:
     name: Cache warmup
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - uses: team-alembic/staple-actions/actions/mix-compile@a74b3b61209d35d45526df174766632f8aee03ed
@@ -29,7 +29,7 @@ jobs:
 
   formatter:
     name: Formatting
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -41,7 +41,7 @@ jobs:
 
   credo:
     name: Credo
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -53,7 +53,7 @@ jobs:
 
   dialyzer:
     name: Dialyzer
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -76,7 +76,7 @@ jobs:
     name: Test
     needs:
       - warmup
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:

.github/workflows/docs-check.yml

@@ -17,7 +17,7 @@ on:
 jobs:
   warmup:
     name: Cache warmup
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - uses: team-alembic/staple-actions/actions/mix-compile@a74b3b61209d35d45526df174766632f8aee03ed
@@ -28,7 +28,7 @@ jobs:
 
   formatter:
     name: Formatting
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - warmup
     steps:
@@ -42,7 +42,7 @@ jobs:
     name: Generation
     needs:
       - warmup
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - uses: actions/checkout@v6
       - uses: team-alembic/staple-actions/actions/mix-compile@a74b3b61209d35d45526df174766632f8aee03ed
@@ -57,7 +57,7 @@ jobs:
           MIX_HOME: ${{ runner.temp }}/.mix
         working-directory: doc/
       - name: Upload documentation artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
         with:
           name: Documentation
           path: doc/doc/

.github/workflows/docs-workflow.yaml

@@ -18,14 +18,14 @@ on:
 
 jobs:
   docs:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       # Checkout the source
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           path: astarte
       # Checkout the docs repository
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           repository: astarte-platform/docs
           path: docs
@@ -41,7 +41,7 @@ jobs:
           mkdir docs/$DOCS_DIRNAME
           cp -r astarte/doc/doc/* docs/$DOCS_DIRNAME/
       - name: Checkout Swagger UI
-        uses: actions/checkout@v2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           repository: swagger-api/swagger-ui
           path: swagger-ui

.github/workflows/pr-container-build-workflow.yaml

@@ -10,7 +10,7 @@ on:
 jobs:
   test-build-container:
     name: Test Container Build
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:
@@ -22,7 +22,7 @@ jobs:
           - astarte-realm-management
           - astarte-trigger-engine
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Building Docker Image
         env:
           CONTAINER_IMAGE_NAME: gh_actions_test

.github/workflows/publish-release-to-dockerhub-workflow.yaml

@@ -85,7 +85,7 @@ jobs:
       - e2e_tests
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
         with:
           ref: ${{ inputs.target_tag || github.ref }}
 
@@ -116,7 +116,7 @@ jobs:
           touch "${{ runner.temp }}/digests/${digest#sha256:}"
 
       - name: Upload digest
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
         with:
           name: ${{ matrix.app }}-digests-${{ matrix.platform.platform-pair }}
           path: ${{ runner.temp }}/digests/*
@@ -125,7 +125,7 @@ jobs:
 
   merge_images:
     name: Publish release
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - build_release
     strategy:
@@ -140,7 +140,7 @@ jobs:
           - astarte_trigger_engine
     steps:
       - name: Download digests
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8
         with:
           path: ${{ runner.temp }}/digests
           pattern: ${{ matrix.app }}-digests-*

.github/workflows/publish-snapshot-to-dockerhub-workflow.yaml

@@ -90,7 +90,7 @@ jobs:
           - astarte_trigger_engine
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
       - name: Log in to Docker Hub
         uses: docker/login-action@v3.4.0
@@ -126,7 +126,7 @@ jobs:
           touch "${{ runner.temp }}/digests/${digest#sha256:}"
 
       - name: Upload digest
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
         with:
           name: ${{ matrix.app }}-digests-${{ matrix.platform.platform-pair }}
           path: ${{ runner.temp }}/digests/*
@@ -135,7 +135,7 @@ jobs:
 
   merge_snapshots:
     name: Publish snapshot
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     needs:
       - build_snapshot
     strategy:
@@ -150,7 +150,7 @@ jobs:
           - astarte_trigger_engine
     steps:
       - name: Download digests
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8
         with:
           path: ${{ runner.temp }}/digests/
           pattern: ${{ matrix.app }}-digests-*