chore(deps): bump the github-actions-all group across 1 directory with 9 updates

.github/workflows/checks.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Install environment
         uses: ./.github/actions/setup-env
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Install environment
         uses: ./.github/actions/setup-env
@@ -43,7 +43,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Install environment
         uses: ./.github/actions/setup-env
@@ -56,7 +56,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Install environment
         uses: ./.github/actions/setup-env
@@ -69,7 +69,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Install environment
         uses: ./.github/actions/setup-env

.github/workflows/deploy-mochi-web-beta.yml

@@ -9,7 +9,7 @@ jobs:
   Deploy-Preview:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v7
       - name: Merge to Preview
         uses: devmasx/merge-branch@master
         with:

.github/workflows/deploy-mochi-web-prod.yml

@@ -10,7 +10,7 @@ jobs:
   Deploy-Production:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v7
       - name: Merge to Prod
         uses: devmasx/merge-branch@master
         with:

.github/workflows/gke-preview.yml

@@ -24,19 +24,19 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
       - name: Login to GCR
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: gcr.io
           username: _json_key
           password: ${{ secrets.GCP_CREDENTIALS }}
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           # list of Docker images to use as base name for tags
           images: |
@@ -49,7 +49,7 @@ jobs:
             type=semver,pattern={{major}}
             type=sha,prefix=,suffix=,format=long
       - name: Build and push
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           push: true
           cache-from: type=gha
@@ -61,7 +61,7 @@ jobs:
             NEXT_PUBLIC_MOCHI_PAY_API_HOST=${{ secrets.NEXT_PUBLIC_MOCHI_PAY_API_HOST }}
 
       # Setup kustomize
-      - uses: imranismail/setup-kustomize@v2
+      - uses: imranismail/setup-kustomize@v3
         with:
           kustomize-version: "5.1.1"
           github-token: ${{ secrets.GH_PAT }}

.github/workflows/gke-prod.yml

@@ -20,19 +20,19 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v7
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
       - name: Login to GCR
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: gcr.io
           username: _json_key
           password: ${{ secrets.GCP_CREDENTIALS }}
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           # list of Docker images to use as base name for tags
           images: |
@@ -45,7 +45,7 @@ jobs:
             type=semver,pattern={{major}}
             type=sha,prefix=,suffix=,format=long
       - name: Build and push
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           push: true
           cache-from: type=gha
@@ -57,7 +57,7 @@ jobs:
             NEXT_PUBLIC_MOCHI_PAY_API_HOST=${{ secrets.NEXT_PUBLIC_MOCHI_PAY_API_HOST }}
 
       # Setup kustomize
-      - uses: imranismail/setup-kustomize@v2
+      - uses: imranismail/setup-kustomize@v3
         with:
           kustomize-version: "5.1.1"
           github-token: ${{ secrets.GH_PAT }}

.github/workflows/release-web.yaml

@@ -20,14 +20,14 @@ jobs:
     name: release
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3 # v3
+      - uses: actions/checkout@v7 # v3
         with:
           fetch-depth: 0 # to be able to checkout any commit
           persist-credentials: false # <--- this
-      - uses: pnpm/action-setup@v2
+      - uses: pnpm/action-setup@v6
         with:
           version: 6.32.9
-      - uses: actions/setup-node@v3 # v3
+      - uses: actions/setup-node@v6 # v3
         with:
           cache: pnpm
           node-version: 18

.github/workflows/release.yml

@@ -25,7 +25,7 @@ jobs:
     if: ${{ contains(fromJSON('["tuanddd", "zlatanpham", "chinhld12", "trankhacvy", "tienan92it", "vdhieu", "leduyhien152", "nguyend-nam", "tonible14012002", "github-actions[bot]", "github-actions"]'), github.triggering_actor) }}
     steps:
       - name: Checkout branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           # see `fetch-depth` in README: https://github.com/actions/checkout#checkout-v4,
           # we set to `0` so the referenced commits are available for the command below
@@ -69,7 +69,7 @@ jobs:
           server-url: ${{ github.server_url }}
 
       - name: Archive npm failure logs
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v7
         if: failure()
         with:
           name: npm-logs

.github/workflows/security.yml

@@ -9,7 +9,7 @@ jobs:
   gitleaks:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: gitleaks (release binary, no license)
@@ -21,11 +21,11 @@ jobs:
   audit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
+      - uses: actions/checkout@v7
+      - uses: pnpm/action-setup@v6
         with:
           version: 9
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
           node-version: 20
       - name: dependency audit (advisory, non-blocking)