Update workflows 2026 03 13 (#7804)

Amndeep7 · web-flow · commit 41da56d1a95d · 2026-03-13T16:44:33.000-04:00
* most recent bundle install brings in a depednency (connection_pool-3.0.2) which requires &gt;= 3.2.0

Signed-off-by: Amndeep Singh Mann &lt;amann@mitre.org&gt;

* update action versions in workflows

Signed-off-by: Amndeep Singh Mann &lt;amann@mitre.org&gt;

* update Gemfile.lock for inspecjs

Signed-off-by: Amndeep Singh Mann &lt;amann@mitre.org&gt;

* update schemas in a manner that doesn't actually make a difference so i don't feel a need to update version numbers or anything

Signed-off-by: Amndeep Singh Mann &lt;amann@mitre.org&gt;

* seems to be an os based distinction so we'll match the github runners

Signed-off-by: Amndeep Singh Mann &lt;amann@mitre.org&gt;

---------

Signed-off-by: Amndeep Singh Mann &lt;amann@mitre.org&gt;
diff --git a/.github/workflows/anchore-syft.yml b/.github/workflows/anchore-syft.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu:24.04
     steps:
     - name: Checkout the code
-      uses: actions/checkout@v5
+      uses: actions/checkout@v6
     - name: Build the Docker image
       run: docker build . --file Dockerfile --tag localbuild/testimage:latest
     - name: Scan the image and upload dependency results
diff --git a/.github/workflows/backend-tests.yml b/.github/workflows/backend-tests.yml
@@ -21,7 +21,7 @@ jobs:
           - 5432:5432
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/build-prod.yml b/.github/workflows/build-prod.yml
@@ -22,7 +22,7 @@ jobs:
     env:
       NODE_ENV: production
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/build-save-docker.yml b/.github/workflows/build-save-docker.yml
@@ -67,7 +67,7 @@ jobs:
           driver: cloud
           endpoint: "mitre/mitre-builder"
       - name: Checkout the Heimdall Repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
       # Note: We build single-platform images only (server-amd64 or server-arm64) because
@@ -77,7 +77,7 @@ jobs:
       # are more practical as they can be loaded with 'docker load -i heimdall.tar'.
       - name: Build and save
         id: docker_build
-        uses: docker/bake-action@v5
+        uses: docker/bake-action@v7
         env:
           TAG_SUFFIXES: ${{ env.DOCKER_TAG }}
         with:
diff --git a/.github/workflows/draft-release.yml b/.github/workflows/draft-release.yml
@@ -16,5 +16,4 @@ jobs:
       - uses: release-drafter/release-drafter@v6
         with:
           disable-autolabeler: true
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/e2e-ui-tests.yml b/.github/workflows/e2e-ui-tests.yml
@@ -38,7 +38,7 @@ jobs:
           SPLUNK_PASSWORD: Valid_password!
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
@@ -72,7 +72,7 @@ jobs:
 
       - name: Upload test screenshots and videos
         if: failure()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: cypress-recording
           path: |
diff --git a/.github/workflows/frontend-tests.yml b/.github/workflows/frontend-tests.yml
@@ -21,7 +21,7 @@ jobs:
           - 5432:5432
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/gh-pages.yml b/.github/workflows/gh-pages.yml
@@ -13,7 +13,7 @@ jobs:
     env:
       NODE_ENV: production
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: setup node
         uses: actions/setup-node@v6
diff --git a/.github/workflows/hdfconverter-tests.yml b/.github/workflows/hdfconverter-tests.yml
@@ -28,7 +28,7 @@ jobs:
           SPLUNK_PASSWORD: Valid_password!
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/inspecjs-tests.yml b/.github/workflows/inspecjs-tests.yml
@@ -14,10 +14,10 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
       - uses: ruby/setup-ruby@v1
         with:
-          ruby-version: '3.1'
+          ruby-version: '3.4'
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
@@ -21,7 +21,7 @@ jobs:
           - 5432:5432
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: Setup Node.js
         uses: actions/setup-node@v6
diff --git a/.github/workflows/push-lite-to-docker.yml b/.github/workflows/push-lite-to-docker.yml
@@ -21,31 +21,31 @@ jobs:
 
     steps:
       - name: Checkout the Heimdall Repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ vars.DOCKER_USER }}
           password: ${{ secrets.DOCKER_PAT }}
 
       - name: Set up QEMU (for emulated builds)
         if: github.event.inputs.use_build_cloud != 'true'
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx (Local)
         if: github.event.inputs.use_build_cloud != 'true'
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Set up Docker Buildx (Docker Build Cloud)
         if: github.event.inputs.use_build_cloud == 'true'
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
         with:
           driver: cloud
           endpoint: "mitre/mitre-builder"
 
       - name: Build and push multi-platform lite image
-        uses: docker/bake-action@v5
+        uses: docker/bake-action@v7
         env:
           TAG_SUFFIXES: "${{ github.sha }},latest"
         with:
diff --git a/.github/workflows/push-server-to-docker.yml b/.github/workflows/push-server-to-docker.yml
@@ -21,31 +21,31 @@ jobs:
 
     steps:
       - name: Checkout the Heimdall Repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ vars.DOCKER_USER }}
           password: ${{ secrets.DOCKER_PAT }}
 
       - name: Set up QEMU (for emulated builds)
         if: github.event.inputs.use_build_cloud != 'true'
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx (Local)
         if: github.event.inputs.use_build_cloud != 'true'
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Set up Docker Buildx (Docker Build Cloud)
         if: github.event.inputs.use_build_cloud == 'true'
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
         with:
           driver: cloud
           endpoint: "mitre/mitre-builder"
 
       - name: Build and push multi-platform server image
-        uses: docker/bake-action@v5
+        uses: docker/bake-action@v7
         env:
           TAG_SUFFIXES: "${{ github.sha }},latest"
         with:
diff --git a/.github/workflows/push-to-npm.yml b/.github/workflows/push-to-npm.yml
@@ -16,7 +16,7 @@ jobs:
   build-deploy:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v6
 
       - name: setup node
         uses: actions/setup-node@v6
diff --git a/.github/workflows/release-lite-to-docker.yml b/.github/workflows/release-lite-to-docker.yml
@@ -33,31 +33,31 @@ jobs:
           flags: 'g'
 
       - name: Checkout the Heimdall Repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ vars.DOCKER_USER }}
           password: ${{ secrets.DOCKER_PAT }}
 
       - name: Set up QEMU (for emulated builds)
         if: github.event.inputs.use_build_cloud != 'true'
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx (Local)
         if: github.event.inputs.use_build_cloud != 'true'
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@44
 
       - name: Set up Docker Buildx (Docker Build Cloud)
         if: github.event.inputs.use_build_cloud == 'true'
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
         with:
           driver: cloud
           endpoint: "mitre/mitre-builder"
 
       - name: Build and push multi-platform lite image
-        uses: docker/bake-action@v5
+        uses: docker/bake-action@v7
         env:
           TAG_SUFFIXES: "${{ steps.format-tag.outputs.replaced }},release-latest"
         with:
diff --git a/.github/workflows/release-server-to-docker.yml b/.github/workflows/release-server-to-docker.yml
@@ -33,31 +33,31 @@ jobs:
           flags: 'g'
 
       - name: Checkout the Heimdall Repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ vars.DOCKER_USER }}
           password: ${{ secrets.DOCKER_PAT }}
 
       - name: Set up QEMU (for emulated builds)
         if: github.event.inputs.use_build_cloud != 'true'
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx (Local)
         if: github.event.inputs.use_build_cloud != 'true'
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Set up Docker Buildx (Docker Build Cloud)
         if: github.event.inputs.use_build_cloud == 'true'
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
         with:
           driver: cloud
           endpoint: "mitre/mitre-builder"
 
       - name: Build and push multi-platform server image
-        uses: docker/bake-action@v5
+        uses: docker/bake-action@v7
         env:
           TAG_SUFFIXES: "${{ steps.format-tag.outputs.replaced }},release-latest"
         with:
diff --git a/libs/inspecjs/Gemfile.lock b/libs/inspecjs/Gemfile.lock
