Merge branch 'main' into notification-migration-cdk

Author: jorgeazevedo

.github/workflows/cdk-test.yml

@@ -19,7 +19,7 @@ jobs:
   cdk-test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - run: corepack enable
 

.github/workflows/fake-breaking-news.yml

@@ -26,7 +26,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1

.github/workflows/football.yml

@@ -25,7 +25,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1

.github/workflows/notification-worker-lambdas.yml

@@ -27,7 +27,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1
@@ -40,10 +40,11 @@ jobs:
           cache-dependency-path: cdk/yarn.lock
           node-version-file: .nvmrc
 
-      - uses: aws-actions/configure-aws-credentials@v2
+      - uses: aws-actions/configure-aws-credentials@v5
         with:
           aws-region: eu-west-1
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
+          mask-aws-account-id: true
 
       - name: Login to ECR
         uses: aws-actions/amazon-ecr-login@v1

.github/workflows/notification.yml

@@ -28,7 +28,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1

.github/workflows/registration.yml

@@ -28,7 +28,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1

.github/workflows/report.yml

@@ -30,7 +30,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1

.github/workflows/sbt-dependency-graph.yaml

@@ -11,10 +11,10 @@ jobs:
     steps:
       - name: Checkout branch
         id: checkout
-        uses: actions/checkout@v6.0.1
+        uses: actions/checkout@v6.0.2
       - name: Install Java
         id: java
-        uses: actions/setup-java@f2beeb24e141e01a676f977032f5a29d81c9e27e # v5.1.0
+        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
           distribution: corretto
           java-version: 17

.github/workflows/schedule-lambda.yml

@@ -25,7 +25,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1

.github/workflows/slo-monitor.yml

@@ -26,7 +26,7 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.1
+      - uses: actions/checkout@v6.0.2
 
       - name: Setup JDK and sbt
         uses: guardian/setup-scala@v1