Bump the actions group across 1 directory with 6 updates

.github/workflows/battery.yml

@@ -49,25 +49,25 @@ jobs:
       E2E_NO_PERF_OFFER: '1'
       MODE: quick
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           path: core
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           repository: ${{ fromJSON(inputs.refs).scenes.repo }}
           ref: ${{ fromJSON(inputs.refs).scenes.ref }}
           path: scenes
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           repository: ${{ fromJSON(inputs.refs).modules.repo }}
           ref: ${{ fromJSON(inputs.refs).modules.ref }}
           path: modules
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           repository: ${{ fromJSON(inputs.refs).packs.repo }}
           ref: ${{ fromJSON(inputs.refs).packs.ref }}
           path: packs
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version-file: core/.nvmrc
           cache: npm
@@ -81,7 +81,7 @@ jobs:
           # the module zips the game suites install (MODULES_REPO)
           (cd modules && npm ci --no-audit --no-fund && node scripts/pack.cjs --all --force)
       # confirm: what the required shards left red (or unrun), from their artifacts
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         if: inputs.set == 'confirm'
         with:
           pattern: battery-required-*
@@ -99,7 +99,7 @@ jobs:
                  POOL_TPSCENE=$S/examples/pool-party/scene.tpscene
           node scripts/ci/battery.cjs run --set ${{ inputs.set }} ${{ inputs.set == 'confirm' && '--from "$W/prev"' || '' }} --shard ${{ matrix.shard }} --of ${{ matrix.of }} --serve --port 5173 \
             --deadline ${{ inputs.deadline }} --out "$W/battery-out"
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: always()
         with:
           name: battery-${{ inputs.set }}-${{ matrix.shard }}

.github/workflows/ci.yml

@@ -33,8 +33,8 @@ jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: npm
@@ -57,8 +57,8 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: npm
@@ -92,8 +92,8 @@ jobs:
   scene-lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: npm
@@ -103,12 +103,12 @@ jobs:
         run: |
           echo "scenes=$(node -p "require('./perf/budgets.json').scenes.ref")" >> "$GITHUB_OUTPUT"
           echo "scenes_repo=$(node -p "require('./perf/budgets.json').scenes.repo")" >> "$GITHUB_OUTPUT"
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           repository: ${{ steps.refs.outputs.scenes_repo }}
           ref: ${{ steps.refs.outputs.scenes }}
           path: .perf-deps/scenes
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           repository: theprototype-app/packs
           path: .perf-deps/packs
@@ -123,7 +123,7 @@ jobs:
   supply-chain:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: SBOM (syft, SPDX JSON)
         uses: anchore/sbom-action@v0.24.3
         with:
@@ -145,8 +145,8 @@ jobs:
   unit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: npm
@@ -160,8 +160,8 @@ jobs:
     # PRs in a row; until then a red here is a signal to read, not a block.
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: npm
@@ -204,8 +204,8 @@ jobs:
     if: ${{ !inputs.battery }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: npm
@@ -229,7 +229,7 @@ jobs:
           npm run e2e -- a11y-axe a11y-reader || rc=$?
           [ -f /tmp/axe/axe-after.md ] && cat /tmp/axe/axe-after.md >> "$GITHUB_STEP_SUMMARY"
           exit $rc
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: always()
         with:
           name: axe-report
@@ -248,10 +248,10 @@ jobs:
     if: github.event_name == 'pull_request'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: npm
@@ -284,7 +284,7 @@ jobs:
           node tests/e2e/tools/kit-diff.cjs diff /tmp/kit/base /tmp/kit/head /tmp/kit/diff; rc=$?
           cat /tmp/kit/diff/report.md >> "$GITHUB_STEP_SUMMARY"
           exit $rc
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         if: always() && steps.base.outputs.has_kit == '1'
         with:
           name: kit-diff

.github/workflows/deps.yml

@@ -53,13 +53,13 @@ jobs:
       battery: ${{ steps.policy.outputs.battery }}
       gate_ci: ${{ github.event_name != 'pull_request' || github.base_ref == 'deps' }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: dependabot metadata
         id: meta
         if: github.event.pull_request.user.login == 'dependabot[bot]'
-        uses: dependabot/fetch-metadata@v2
+        uses: dependabot/fetch-metadata@v3
       - name: policy
         id: policy
         env:
@@ -115,7 +115,7 @@ jobs:
       playwright: ${{ steps.pw.outputs.version }}
       refs: ${{ steps.refs.outputs.refs }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - id: plan
         run: node scripts/ci/battery.cjs plan
       - id: pw
@@ -166,8 +166,8 @@ jobs:
     if: ${{ !cancelled() && needs.e2e-optional.result != 'skipped' }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@v7
+      - uses: actions/download-artifact@v8
         with:
           pattern: battery-optional-*
           path: battery
@@ -186,13 +186,13 @@ jobs:
       issues: write
       statuses: write
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/download-artifact@v4
+      - uses: actions/checkout@v7
+      - uses: actions/download-artifact@v8
         if: needs.scope.outputs.battery == 'true'
         with:
           pattern: battery-required-*
           path: battery
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         if: needs.scope.outputs.battery == 'true' && needs.confirm.result != 'skipped'
         with:
           pattern: battery-confirm-*
@@ -217,7 +217,7 @@ jobs:
           fi
           if [ "$BATTERY" = true ] && [ "$E2E" = skipped ]; then exit 1; fi
           if [ "$GATE_CI" = true ] && { [ "$CI" != success ] || { [ "$BATTERY" = true ] && [ "$PERF" != success ]; }; }; then exit 1; fi
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v7
         with:
           name: battery-durations
           path: battery/durations.json

.github/workflows/release.yml

@@ -17,8 +17,8 @@ jobs:
     needs: budget
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
           node-version-file: .nvmrc
           cache: npm
@@ -64,7 +64,7 @@ jobs:
 
       - name: zip the build
         run: cd build && zip -r "../theprototype-${GITHUB_REF_NAME}.zip" .
-      - uses: softprops/action-gh-release@v2
+      - uses: softprops/action-gh-release@v3
         with:
           generate_release_notes: true
           files: |