ci: bump first-party Actions to Node 24 majors

.github/actions/core-cicd/cleanup-runner/Readme.md

@@ -42,7 +42,7 @@ jobs:
   build:
     runs-on: ubuntu-${{ vars.UBUNTU_RUNNER_VERSION || '24.04' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v5
 
       # Your build steps here...
 

.github/actions/core-cicd/deployment/deploy-cli-npm/action.yml

@@ -39,12 +39,12 @@ runs:
   using: "composite"
   steps:
     - name: 'Checkout'
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ inputs.ref }}
 
     - name: 'Set up Node.js'
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v5
       with:
         node-version: ${{ inputs.node-version }}
 

.github/actions/core-cicd/deployment/deploy-javadoc/README.md

@@ -36,7 +36,7 @@ This GitHub composite action deploys Javadoc artifacts to the GitHub Packages re
 
 ## Steps
 
-1. **Checkout**: Uses the `actions/checkout@v4` action to check out the specified branch.
+1. **Checkout**: Uses the `actions/checkout@v5` action to check out the specified branch.
 2. **Maven Clean Build**: Runs a Maven clean install to build the project (skipping tests), only if `artifact-run-id` is not provided.
 3. **Deploy Javadoc**: Runs Maven to generate Javadocs and restores classes from the specified artifact run ID if provided.
 4. **Configure AWS Credentials**: Configures AWS credentials using the `aws-actions/configure-aws-credentials@v1` action.

.github/actions/core-cicd/deployment/deploy-javadoc/action.yml

@@ -28,7 +28,7 @@ runs:
   using: "composite"
   steps:
     - name: 'Checkout'
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ inputs.ref }}
 

.github/actions/core-cicd/deployment/deploy-javascript-sdk/README.md

@@ -35,10 +35,10 @@ This GitHub Action is designed to automate the process of publishing dotCMS SDK
 ## Detailed Steps
 
 1. **Checkout**  
-   The action uses `actions/checkout@v4` to check out the specified branch, allowing the workflow to access the repository's contents.
+   The action uses `actions/checkout@v5` to check out the specified branch, allowing the workflow to access the repository's contents.
 
 2. **Set Up Node.js**  
-   `actions/setup-node@v4` sets up the Node.js environment, crucial for running scripts and managing dependencies.
+   `actions/setup-node@v5` sets up the Node.js environment, crucial for running scripts and managing dependencies.
 
 3. **Get Next Version**  
    This step retrieves the next version of the SDK by reading the `package.json` file from the specified directory.

.github/actions/core-cicd/deployment/deploy-javascript-sdk/action.yml

@@ -42,13 +42,13 @@ runs:
   using: "composite"
   steps:
     - name: 'Checkout'
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ inputs.ref }}
         token: ${{ inputs.github-token }}
 
     - name: 'Setup Node'
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v5
       with:
         node-version-file: 'core-web/.nvmrc'
 

.github/actions/core-cicd/deployment/deploy-jfrog/README.md

@@ -34,7 +34,7 @@ jobs:
   deploy:
     runs-on: ubuntu-${{ vars.UBUNTU_RUNNER_VERSION || '24.04' }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Deploy Artifact
         uses: ./.github/actions/core-cicd/deployment/deploy-jfrog

.github/actions/core-cicd/deployment/deploy-jfrog/action.yml

@@ -38,7 +38,7 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Install xmllint
       run: |

.github/actions/core-cicd/maven-job/README.md

@@ -73,7 +73,7 @@ jobs:
   build-and-test:
     runs-on: ubuntu-${{ vars.UBUNTU_RUNNER_VERSION || '24.04' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v5
 
       - name: Run Maven Job
         uses: ./.github/actions/core-cicd/maven-job

.github/actions/core-cicd/prepare-runner/README.md

@@ -55,7 +55,7 @@ jobs:
   build:
     runs-on: ubuntu-${{ vars.UBUNTU_RUNNER_VERSION || '24.04' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v5
 
       - name: Prepare Runner
         uses: ./.github/actions/core-cicd/prepare-runner

.github/actions/core-cicd/setup-java/README.md

@@ -54,7 +54,7 @@ jobs:
   build:
     runs-on: ubuntu-${{ vars.UBUNTU_RUNNER_VERSION || '24.04' }}
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v5
 
       - name: Setup Java
         uses: ./.github/actions/core-cicd/setup-java

.github/actions/legacy-release/sbom-generator/action.yml

@@ -16,7 +16,7 @@ runs:
   using: "composite"
   steps:
     - name: Checkout core repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         repository: dotCMS/core
         token: ${{ inputs.github_token }}

.github/workflows/ai_claude-backend-reviewer.yml

@@ -45,7 +45,7 @@ jobs:
     outputs:
       has_java: ${{ steps.check.outputs.has_java }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 

.github/workflows/ai_claude-orchestrator.yml

@@ -34,7 +34,7 @@ jobs:
       authorized: ${{ steps.membership-check.outputs.is_member }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Check organization membership
         id: membership-check

.github/workflows/ai_claude-rollback-safety.yml

@@ -23,7 +23,7 @@ jobs:
       authorized: ${{ steps.membership-check.outputs.is_member }}
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Check organization membership
         id: membership-check

.github/workflows/cicd_4-nightly.yml

@@ -74,7 +74,7 @@ jobs:
       build-ref: ${{ steps.find-commit.outputs.build-ref }}
       tag-date: ${{ steps.find-commit.outputs.tag-date }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
           ref: main

.github/workflows/cicd_5-lts.yml

@@ -46,7 +46,7 @@ jobs:
     outputs:
       version: ${{ steps.resolve.outputs.version }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Resolve version from input or maven.config
         id: resolve
         env:

.github/workflows/cicd_6-release.yml

@@ -205,7 +205,7 @@ jobs:
     if: always()
     steps:
       - name: Checkout core
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: main
 
@@ -226,7 +226,7 @@ jobs:
           && !contains(needs.release-prepare.outputs.release_tag, '_lts_')
           && startsWith(needs.release-prepare.outputs.release_tag, 'v')
         continue-on-error: true
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: '22'
 

.github/workflows/cicd_comp_ai-release-notes-phase.yml

@@ -63,12 +63,12 @@ jobs:
           echo "Release '${RELEASE_TAG}' found."
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: main
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: '22'
 

.github/workflows/cicd_comp_build-phase.yml

@@ -73,13 +73,13 @@ jobs:
     steps:
       # Checkout code based on whether a specific ref is provided
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         if: inputs.ref == ''
         with:
           fetch-depth: 0
       - name: Checkout code with ref ${{ inputs.ref }}
         if: inputs.ref != ''
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.ref }}
           fetch-depth: 0

.github/workflows/cicd_comp_cli-native-build-phase.yml

@@ -87,7 +87,7 @@ jobs:
       artifact-url: ${{ steps.upload-artifact.outputs.artifact-url }}
     steps:
       - name: 'Checkout'
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ env.BRANCH }}
 

.github/workflows/cicd_comp_deployment-phase.yml

@@ -146,7 +146,7 @@ jobs:
       formatted_tags: ${{ steps.format-tags.outputs.formatted_tags }}
     steps:
       # Checkout the repository
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 

.github/workflows/cicd_comp_initialize-phase.yml

@@ -128,7 +128,7 @@ jobs:
       # JSON array of filter names that matched (from dorny/paths-filter)
       changes: ${{ steps.filter.outputs.changes }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         if: ${{ inputs.change-detection == 'enabled' }}
 
       # Execute the paths-filter step to determine changes

.github/workflows/cicd_comp_pr-area-labeler.yml

@@ -31,13 +31,13 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout for config
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           sparse-checkout: .github/area-labels.yml
           sparse-checkout-cone-mode: false
 
       - name: Apply Area Labels
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const fs = require('fs');

.github/workflows/cicd_comp_release-phase.yml

@@ -89,7 +89,7 @@ jobs:
       JVM_TEST_MAVEN_OPTS: '-e -B -Dorg.slf4j.simpleLogger.log.org.apache.maven.cli.transfer.Slf4jMavenTransferListener=warn'
     steps:
       - name: Checkout core
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.release_tag }}
 
@@ -239,7 +239,7 @@ jobs:
     if: inputs.java-version == ''
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - uses: ./.github/actions/legacy-release/sbom-generator
         id: sbom-generator

.github/workflows/cicd_comp_release-prepare-phase.yml

@@ -84,7 +84,7 @@ jobs:
           GITHUB_CONTEXT: ${{ toJson(github) }}
 
       - name: Checkout core
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
           token: ${{ secrets.CI_MACHINE_TOKEN || github.token }}

.github/workflows/cicd_comp_semgrep-phase.yml

@@ -29,7 +29,7 @@ jobs:
       (github.ref == 'refs/heads/main' || github.event_name == 'pull_request') && github.repository == 'dotCMS/core'
     steps:
       # Checkout the repository with full history for accurate analysis
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
@@ -64,7 +64,7 @@ jobs:
     # Skip any PR created by dependabot to avoid permission issues:
     if: (github.actor != 'dependabot[bot]')
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Download artifact from the previous job
         uses: actions/download-artifact@v4
         with:

.github/workflows/cicd_comp_test-phase.yml

@@ -82,7 +82,7 @@ jobs:
       has-tests: ${{ steps.generate-matrix.outputs.has-tests }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 
@@ -94,7 +94,7 @@ jobs:
 
       - name: Generate test matrix
         id: generate-matrix
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const fs = require('fs');
@@ -186,7 +186,7 @@ jobs:
 
     steps:          
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
 

.github/workflows/cicd_manual-release-sdks.yml

@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: 'Checkout main'
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: main
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/cicd_manual_build-docker-context.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-${{ vars.UBUNTU_RUNNER_VERSION || '24.04' }}
     steps:
       - name: Checkout core
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Set Common Vars
         run: |
           PLATFORMS='linux/amd64'

.github/workflows/cicd_manual_build-java-base.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-${{ vars.UBUNTU_RUNNER_VERSION || '24.04' }}
     steps:
       - name: Checkout core
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: Set Common Vars
         run: |
           PLATFORMS='linux/amd64'

.github/workflows/cicd_manual_publish-starter.yml

@@ -111,7 +111,7 @@ jobs:
     steps:
       - name: 'Checkout repository'
         if: ${{ github.event.inputs.type == 'empty' && github.event.inputs.dry-run == 'false' }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - uses: jfrog/setup-jfrog-cli@v4
         env:
@@ -212,7 +212,7 @@ jobs:
     if: always() && github.event.inputs.dry-run == 'false'
     steps:
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       - name: Compose Message
         id: compose-message

.github/workflows/cicd_post-workflow-reporting.yml

@@ -55,7 +55,7 @@ jobs:
         run: echo "$GITHUB_CONTEXT"
 
       # Checkout the repository
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
 
       # Download workflow data from previous run
       - name: Download Workflow Data