[KLC-1927] bump third-party actions to Node.js 24 runtimes

Remaining node20 JS actions flagged by the deprecation notice. Bumped to
their latest Node 24 majors (inputs we use are unchanged):

  sonarsource/sonarqube-scan-action          v6 -> v8
  softprops/action-gh-release                v2 -> v3
  google-github-actions/auth                 v2 -> v3
  google-github-actions/upload-cloud-storage v2 -> v3
  docker/setup-qemu-action                   v3 -> v4
  docker/setup-buildx-action                 v3 -> v4
  docker/login-action                        v3 -> v4

sonarqube-scan-action v8 enables scanner signature verification by default
(skipSignatureVerification now false); auth v3 keeps credentials_json;
upload-cloud-storage v3 keeps predefinedAcl/parent; setup-buildx v4 keeps
driver-opts. quality-gate-action and twingate are composite (unaffected);
golangci-lint-action and actions/checkout are already Node 24.

Author: fbsobreira

.github/workflows/pr-qa-sec.yaml

@@ -124,7 +124,7 @@ jobs:
           service-key: ${{ secrets.TWINGATE_SERVICE_ACCOUNT }}
 
       - name: SonarQube Scan
-        uses: sonarsource/sonarqube-scan-action@v6
+        uses: sonarsource/sonarqube-scan-action@v8
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
           SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}
@@ -142,7 +142,7 @@ jobs:
         if: github.event_name != 'pull_request'
 
       - name: SonarQube Go detailed scan PR
-        uses: sonarsource/sonarqube-scan-action@v6
+        uses: sonarsource/sonarqube-scan-action@v8
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
           SONAR_HOST_URL: ${{ secrets.SONAR_HOST_URL }}

.github/workflows/release-docker.yaml

@@ -77,21 +77,21 @@ jobs:
 
       - name: Set up QEMU
         if: ${{ matrix.enabled }}
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
         with:
           platforms: linux/amd64,linux/arm64
 
       - name: Set up Docker Buildx
         if: ${{ matrix.enabled }}
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
         with:
           driver-opts: |
             image=moby/buildkit:latest
             network=host
 
       - name: Login to Docker Hub
         if: ${{ matrix.enabled }}
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_REGISTRY_USER }}
           password: ${{ secrets.DOCKER_REGISTRY_PASSWORD }}

.github/workflows/release.yaml

@@ -82,7 +82,7 @@ jobs:
 
       - name: Create Release
         id: create_release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           files: |
             bin/klevergo-node${{ matrix.extension }}
@@ -103,33 +103,33 @@ jobs:
         run: echo "VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
 
       - name: Configure GCP service account
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@v3
         with:
           credentials_json: '${{ secrets.GCP_CLOUD_RUN_SA }}'
 
       - name: Upload operator files to bucket
-        uses: 'google-github-actions/upload-cloud-storage@v2'
+        uses: 'google-github-actions/upload-cloud-storage@v3'
         with:
           path: 'bin/klevergo-operator${{ matrix.extension }}'
           destination: 'kleverchain-public/koperator/${{ matrix.name }}/${{ env.VERSION }}'
           predefinedAcl: 'publicRead'
 
       - name: Upload node files to bucket
-        uses: 'google-github-actions/upload-cloud-storage@v2'
+        uses: 'google-github-actions/upload-cloud-storage@v3'
         with:
           path: 'bin/klevergo-node${{ matrix.extension }}'
           destination: 'kleverchain-public/knode/${{ matrix.name }}/${{ env.VERSION }}'
           predefinedAcl: 'publicRead'
 
       - name: Upload benchmark files to bucket
-        uses: 'google-github-actions/upload-cloud-storage@v2'
+        uses: 'google-github-actions/upload-cloud-storage@v3'
         with:
           path: 'bin/klevergo-benchmark${{ matrix.extension }}'
           destination: 'kleverchain-public/kbenchmark/${{ matrix.name }}/${{ env.VERSION }}'
           predefinedAcl: 'publicRead'
 
       - name: Upload Klever Blockchain IDE operator files to bucket
-        uses: 'google-github-actions/upload-cloud-storage@v2'
+        uses: 'google-github-actions/upload-cloud-storage@v3'
         with:
           path: 'bin/${{ matrix.name }}'
           destination: 'kleverchain-public/koperator/${{ matrix.name }}/${{ env.VERSION }}'