Merge pull request #498 from sbesson/actions_upgrade

Upgrade GitHub actions

Author: sbesson

.github/workflows/codeql.yml

@@ -33,16 +33,16 @@ jobs:
           build-mode: none
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/workflow.yml

@@ -9,6 +9,8 @@ jobs:
 
   test:
     name: Test
+    permissions:
+      contents: read
     strategy:
       # Keep running so we can see if other tests pass
       fail-fast: false
@@ -18,7 +20,7 @@ jobs:
           - '3.11'
           - '3.12'
         os:
-          - ubuntu-22.04
+          - ubuntu-latest
           - windows-latest
         include:
           - python-version: '3.10'
@@ -31,12 +33,12 @@ jobs:
           py=$(echo ${{ matrix.python-version }} | tr -d .)
           echo "py=$py" >> $GITHUB_OUTPUT
         shell: bash
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: ${{ matrix.python-version }}
       - name: Download the latest OMERO.server
-        if: matrix.os == 'ubuntu-22.04'
+        if: matrix.os == 'ubuntu-latest'
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
@@ -53,13 +55,15 @@ jobs:
   publish-pypi:
     name: Pypi
     if: startsWith(github.ref, 'refs/tags')
+    permissions:
+      contents: write
     needs:
       # Only publish if other jobs passed
       - test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v6
+      - uses: actions/setup-python@v6
         with:
           python-version: '3.10'
       - name: Build package