chore(deps): update github actions

Author: renovate[bot]

.github/workflows/_charm-linting.yaml

@@ -6,7 +6,7 @@ on:
 jobs:
   lint:
     name: Lint
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/_charm-release.yaml

@@ -9,7 +9,7 @@ on:
 jobs:
   release-charm:
     name: Release Charm to Edge Risk Level
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/_charm-tests-integration.yaml

@@ -6,7 +6,7 @@ on:
 jobs:
   integration-test:
     name: Integration Tests (microk8s)
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/_charm-tests-unit.yaml

@@ -6,7 +6,7 @@ on:
 jobs:
   unit-tests:
     name: Unit Tests
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/_rock-build.yaml

@@ -6,7 +6,7 @@ on:
 jobs:
   build:
     name: Build
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -28,15 +28,15 @@ jobs:
           syft ${{ env.ROCK }} -o spdx-json=${{ env.ROCK_NAME }}.sbom.json
 
       - name: Upload SBOMs
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4
         with:
           name: ${{ env.ROCK_NAME }}-sbom
           path: "${{ env.ROCK_NAME }}.sbom.json"
         env:
           ROCK_NAME: ${{ steps.rock_info.outputs.rock_name }}
 
       - name: Upload rock
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4
         with:
           name: rock
           path: ${{ env.ROCK }}

.github/workflows/_rock-linting.yaml

@@ -6,7 +6,7 @@ on:
 jobs:
   lint:
     name: Lint
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/_rock-publish.yaml

@@ -6,7 +6,7 @@ on:
 jobs:
   publish:
     name: Publish
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -24,7 +24,7 @@ jobs:
           sudo snap install yq
 
       - name: Download rock
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4
         with:
           name: rock
 

.github/workflows/_rock-scan.yaml

@@ -6,7 +6,7 @@ on:
 jobs:
   scan:
     name: Scan
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
 
     steps:
       - name: Checkout
@@ -29,6 +29,6 @@ jobs:
           ROCK_VERSION: ${{ steps.rock_info.outputs.rock_version }}
 
       - name: Upload scan results to GitHub
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3
         with:
           sarif_file: 'trivy-results.sarif'

.github/workflows/charm-libs-release.yaml

@@ -6,7 +6,7 @@ on:
 jobs:
   release-libs:
     name: Release Charm Libraries
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4

.github/workflows/charm-libs-update.yaml

@@ -11,7 +11,7 @@ on:
 jobs:
   update-libs:
     name: Update Charm Dependent Libraries
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
         uses: actions/checkout@v4