[build] update GitHub Actions to latest major versions

.github/workflows/bazel.yml

@@ -127,7 +127,7 @@ jobs:
             echo "val=$((COMMIT_COUNT + 1))" >> "$GITHUB_OUTPUT"
           fi
       - name: Checkout source tree
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.ref || github.ref }}
           fetch-depth: ${{ steps.depth.outputs.val }}
@@ -144,7 +144,7 @@ jobs:
           GIT_REF: ${{ github.ref }}
       - name: Restore cache
         if: inputs.cache-name != ''
-        uses: actions/cache/restore@v4
+        uses: actions/cache/restore@v5
         with:
           path: ${{ inputs.cache-name }}
           key: ${{ inputs.cache-name }}-
@@ -167,12 +167,12 @@ jobs:
         run: echo '${{ inputs.ruby-version }}' > rb/.ruby-version
       - name: Setup Node
         if: inputs.node-version != ''
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ inputs.node-version }}
       - name: Setup Bazel with caching
         if: inputs.caching
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: bazel-contrib/setup-bazel@0.19.0
         with:
           cache-save: ${{ github.ref_name == 'trunk' }}
           bazelisk-cache: true
@@ -206,7 +206,7 @@ jobs:
           repository-cache: true
       - name: Setup Bazel without caching
         if: inputs.caching == false
-        uses: bazel-contrib/setup-bazel@0.18.0
+        uses: bazel-contrib/setup-bazel@0.19.0
         with:
           cache-save: false
           bazelisk-cache: true
@@ -233,7 +233,7 @@ jobs:
         run: sudo safaridriver --enable
       - name: Import GPG key
         if: inputs.gpg-sign
-        uses: crazy-max/ghaction-import-gpg@v6
+        uses: crazy-max/ghaction-import-gpg@v7
         with:
           gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
           passphrase: ${{ secrets.GPG_PASSPHRASE }}
@@ -260,7 +260,7 @@ jobs:
         run: ./scripts/github-actions/collect-test-logs.sh
       - name: Upload failed test logs
         if: failure()
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: test-logs-${{ inputs.os }}-${{ inputs.name }}-${{ inputs.browser }}
           retention-days: 7
@@ -278,7 +278,7 @@ jobs:
           [ -s changes.patch ] || rm -f changes.patch
       - name: Upload artifact
         if: always() && inputs.artifact-name != ''
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: ${{ inputs.artifact-name }}
           path: ${{ inputs.artifact-path || 'changes.patch' }}

.github/workflows/ci-build-index.yml

@@ -24,11 +24,11 @@ jobs:
     permissions: {}
     steps:
       - name: Download index
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: bazel-test-file-index
       - name: Cache index
-        uses: actions/cache/save@v4
+        uses: actions/cache/save@v5
         with:
           path: bazel-test-file-index
           key: bazel-test-file-index-${{ github.run_id }}

.github/workflows/ci-lint.yml

@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Validate workflows
         uses: raven-actions/actionlint@v2
 
@@ -29,9 +29,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Check for protected files
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@v4
         id: filter
         with:
           filters: |
@@ -81,7 +81,7 @@ jobs:
       should-commit: ${{ steps.check.outputs.should-commit }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: Check last commit author

.github/workflows/ci-rust.yml

@@ -52,7 +52,7 @@ jobs:
       RUSTFLAGS: '-Ctarget-feature=+crt-static'
     steps:
       - name: "Checkout project"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.branch }}
       - name: "Update Rust"
@@ -67,7 +67,7 @@ jobs:
       - name: "Rename binary"
         run: mv rust/target/release/selenium-manager.exe selenium-manager-windows.exe
       - name: "Upload release binary"
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: selenium-manager-windows
           path: selenium-manager-windows.exe
@@ -82,7 +82,7 @@ jobs:
       RUSTFLAGS: '-Ctarget-feature=+crt-static'
     steps:
       - name: "Checkout project"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.branch }}
       - name: "Update Rust"
@@ -97,7 +97,7 @@ jobs:
       - name: "Rename binary"
         run: mv rust/target/debug/selenium-manager.exe selenium-manager-windows-debug.exe
       - name: "Upload release binary"
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: selenium-manager-windows-debug
           path: selenium-manager-windows-debug.exe
@@ -110,7 +110,7 @@ jobs:
     if: github.event_name != 'schedule'
     steps:
       - name: "Checkout project"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.branch }}
       - name: "Update Rust"
@@ -126,7 +126,7 @@ jobs:
       - name: "Rename binary"
         run: mv rust/target/x86_64-unknown-linux-musl/release/selenium-manager selenium-manager-linux
       - name: "Upload release binary"
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: selenium-manager-linux
           path: selenium-manager-linux
@@ -139,7 +139,7 @@ jobs:
     if: github.event_name != 'schedule'
     steps:
       - name: "Checkout project"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.branch }}
       - name: "Update Rust"
@@ -156,7 +156,7 @@ jobs:
           tar -cvf ../../../../selenium-manager-linux-debug.tar selenium-manager
         working-directory: rust
       - name: "Upload release binary"
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: selenium-manager-linux-debug
           path: selenium-manager-linux-debug.tar
@@ -171,7 +171,7 @@ jobs:
       RUSTFLAGS: '-Ctarget-feature=+crt-static'
     steps:
       - name: "Checkout project"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.branch }}
       - name: "Update Rust"
@@ -189,7 +189,7 @@ jobs:
             target/x86_64-apple-darwin/release/selenium-manager
         working-directory: rust
       - name: "Upload release binary"
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: selenium-manager-macos
           path: rust/target/selenium-manager-macos
@@ -204,7 +204,7 @@ jobs:
       RUSTFLAGS: '-Ctarget-feature=+crt-static'
     steps:
       - name: "Checkout project"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.branch }}
       - name: "Update Rust"
@@ -224,7 +224,7 @@ jobs:
           tar -cvf ../../selenium-manager-macos-debug.tar selenium-manager
         working-directory: rust
       - name: "Upload release binary"
-        uses: actions/upload-artifact@v5
+        uses: actions/upload-artifact@v6
         with:
           name: selenium-manager-macos-debug
           path: selenium-manager-macos-debug.tar
@@ -237,12 +237,12 @@ jobs:
     if: github.event_name != 'schedule' && github.event.repository.fork == false && (github.ref == 'refs/heads/trunk' || inputs.release)
     steps:
       - name: "Checkout selenium_manager_artifacts"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           token: ${{ secrets.SELENIUM_CI_TOKEN }}
           repository: SeleniumHQ/selenium_manager_artifacts
       - name: "Download Artifacts"
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           path: artifacts
       - name: "Prepare and Commit"
@@ -260,7 +260,7 @@ jobs:
           git tag "selenium-manager-$short_hash"
           git push && git push --tags
       - name: "Release"
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           token: ${{ secrets.SELENIUM_CI_TOKEN }}
           repository: SeleniumHQ/selenium_manager_artifacts

.github/workflows/ci.yml

@@ -66,7 +66,7 @@ jobs:
       rust: ${{ steps.read.outputs.rust }}
     steps:
       - name: Download targets
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: check-targets
       - name: Read targets

.github/workflows/commit-changes.yml

@@ -40,13 +40,13 @@ jobs:
       actions: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ inputs.ref || github.ref }}
           token: ${{ secrets.SELENIUM_CI_TOKEN || github.token }}
       - name: Download patch
         id: download
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: ${{ inputs.artifact-name }}
         continue-on-error: true

.github/workflows/delete-comments.yml

@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Check for specific strings in comment
         id: check_comment
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const comment = context.payload.comment.body;
@@ -22,7 +22,7 @@ jobs:
 
       - name: Delete comment if it contains any of the specific strings
         if: steps.check_comment.outputs.result == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const commentId = context.payload.comment.id;
@@ -34,7 +34,7 @@ jobs:
 
       - name: Block user from the org if their comment contained any of the banned strings
         if: steps.check_comment.outputs.result == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const username = context.payload.comment.user.login

.github/workflows/issue-labeler.yml

@@ -12,7 +12,7 @@ jobs:
     permissions:
       issues: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Parse bug report form
         id: bug-parser
@@ -45,7 +45,7 @@ jobs:
         continue-on-error: true
 
       - name: Clean up labeled sections
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -119,7 +119,7 @@ jobs:
 
       - name: Get latest Selenium version
         id: get-version
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -145,7 +145,7 @@ jobs:
 
       - name: Compare user version
         id: version-check
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const form = JSON.parse(process.env.FORM_JSON || '{}');
@@ -167,7 +167,7 @@ jobs:
       - name: Comment if version is outdated
         id: comment-version
         if: steps.version-check.outputs.is-outdated == 'true'
-        uses: peter-evans/create-or-update-comment@v4
+        uses: peter-evans/create-or-update-comment@v5
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           issue-number: ${{ github.event.issue.number }}

.github/workflows/label-commenter.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout base repo to get config file
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.base.ref }}
           repository: seleniumhq/selenium

.github/workflows/lock.yml

@@ -15,7 +15,7 @@ jobs:
     if: github.event.repository.fork == false
     runs-on: ubuntu-latest
     steps:
-      - uses: dessant/lock-threads@v5
+      - uses: dessant/lock-threads@v6
         with:
           process-only: 'issues'
           issue-inactive-days: '30'

.github/workflows/mirror-selenium-releases.yml

@@ -12,7 +12,7 @@ jobs:
     if: github.event.repository.fork == false
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
       with:
         persist-credentials: false
     - name: Read api.github.com and filter response

.github/workflows/nightly.yml

@@ -86,7 +86,7 @@ jobs:
       contents: write
     steps:
       - name: Download grid packages
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v5
         with:
           name: nightly-grid
           path: build/dist
@@ -105,7 +105,7 @@ jobs:
     needs: [prepare, nightly-release, release-grid]
     if: failure()
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Slack Notification
         uses: rtCamp/action-slack-notify@v2
         env: