ci: update github actions dependencies

.github/workflows/build.yml

@@ -20,7 +20,7 @@ jobs:
       name: ${{ steps.info.outputs.name }}
     steps:
       - name: checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: ${{ github.event.workflow_run.head_sha }}
       - name: fetch tags
@@ -65,7 +65,7 @@ jobs:
           app-id: ${{ vars.GH_APP_ID }}
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
       - name: get latest web artifact
-        uses: dawidd6/action-download-artifact@v2
+        uses: dawidd6/action-download-artifact@v6
         with:
           github_token: ${{ steps.app-token.outputs.token }}
           workflow: ci.yml
@@ -92,7 +92,7 @@ jobs:
       # This is for stable release with version tags
       - name: Dowload latest changelog
         if: needs.info.outputs.new_tag
-        uses: dawidd6/action-download-artifact@v2
+        uses: dawidd6/action-download-artifact@v6
         with:
           workflow: release.yml
           name: changelog-${{ needs.info.outputs.new_tag }}
@@ -116,18 +116,18 @@ jobs:
       IMAGE_NAME: reearth/reearth-marketplace
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - uses: actions/create-github-app-token@v1
         id: app-token
         with:
           app-id: ${{ vars.GH_APP_ID }}
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
       - name: Login to DockerHub
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -156,7 +156,7 @@ jobs:
           echo "::set-output name=version::$VERSION"
           echo "::set-output name=tags::$TAGS"
       - name: Download web arfiacts
-        uses: dawidd6/action-download-artifact@v2
+        uses: dawidd6/action-download-artifact@v6
         with:
           github_token: ${{ steps.app-token.outputs.token }}
           workflow: ci.yml
@@ -167,7 +167,7 @@ jobs:
       - name: Extract
         run: tar -xvf reearth-marketplace-web.tar.gz && mv reearth-marketplace-web server/web
       - name: Build and load docker image
-        uses: docker/build-push-action@v3
+        uses: docker/build-push-action@v6
         with:
           context: ./server
           platforms: ${{ steps.options.outputs.platforms }}
@@ -183,7 +183,7 @@ jobs:
       - name: Save docker image
         run: docker save ${{ steps.options.outputs.tags }} | gzip > reearth-marketplace.tar.gz
       - name: Save imaged to artifact
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v4
         # env:
         #   TAG: ${{ needs.info.outputs.tag_short }}
         #   NAME: ${{ needs.info.outputs.name }}

.github/workflows/ci.yml

@@ -18,12 +18,12 @@ jobs:
       web: ${{ steps.web.outputs.any_changed }}
       server: ${{ steps.server.outputs.any_changed }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Get web changed files
         id: web
-        uses: tj-actions/changed-files@v24
+        uses: tj-actions/changed-files@v45
         with:
           files: |
             .github/workflows/ci.yml
@@ -36,7 +36,7 @@ jobs:
             .eslintignore
       - name: Get server changed files
         id: server
-        uses: tj-actions/changed-files@v24
+        uses: tj-actions/changed-files@v45
         with:
           files: |
             .github/workflows/ci.yml
@@ -55,14 +55,14 @@ jobs:
       run:
         working-directory: web
     steps:
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
           node-version: lts/*
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - name: Get yarn cache directory path
         id: yarn-cache-dir-path
         run: echo "::set-output name=dir::$(yarn cache dir)"
-      - uses: actions/cache@v3
+      - uses: actions/cache@v4
         id: yarn-cache # use this to check for `cache-hit` (`steps.yarn-cache.outputs.cache-hit != 'true'`)
         with:
           path: ${{ steps.yarn-cache-dir-path.outputs.dir }}
@@ -76,7 +76,7 @@ jobs:
       - name: Test
         run: yarn coverage
       - name: codecov
-        uses: codecov/codecov-action@v2
+        uses: codecov/codecov-action@v4
         with:
           flags: web
       - name: Check translations
@@ -88,7 +88,7 @@ jobs:
       - name: Pack
         if: github.ref == 'refs/heads/main' || github.ref == 'refs/heads/release'
         run: mv dist reearth-marketplace-web && tar -zcvf reearth-marketplace-web.tar.gz reearth-marketplace-web
-      - uses: actions/upload-artifact@v3
+      - uses: actions/upload-artifact@v4
         if: github.ref == 'refs/heads/main' || github.ref == 'refs/heads/release'
         with:
           name: reearth-marketplace-web
@@ -104,24 +104,24 @@ jobs:
         working-directory: server
     services:
       mongo:
-        image: mongo:4.4-focal
+        image: mongo:6.0-focal
         ports:
           - 27017:27017
     steps:
-      - uses: actions/setup-go@v3
+      - uses: actions/setup-go@v5
         with:
           go-version: 1.19
       - name: checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: ~/go/pkg/mod
           key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
           restore-keys: |
             ${{ runner.os }}-go-
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v3
+        uses: golangci/golangci-lint-action@v6
         with:
           version: v1.49
           working-directory: server
@@ -131,7 +131,7 @@ jobs:
         env:
           REEARTH_MARKETPLACE_DB: mongodb://localhost
       - name: codecov
-        uses: codecov/codecov-action@v2
+        uses: codecov/codecov-action@v4
         with:
           flags: server
           file: coverage.txt

.github/workflows/deploy.yml

@@ -21,7 +21,7 @@ jobs:
           app-id: ${{ vars.GH_APP_ID }}
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
       - name: get latest web artifact
-        uses: dawidd6/action-download-artifact@v2
+        uses: dawidd6/action-download-artifact@v6
         with:
           github_token: ${{ steps.app-token.outputs.token }}
           workflow: ci.yml
@@ -32,11 +32,11 @@ jobs:
           search_artifacts: true
       - name: Extract
         run: tar -xvf reearth-marketplace-web.tar.gz
-      - uses: google-github-actions/auth@v0
+      - uses: google-github-actions/auth@v2
         with:
           credentials_json: "${{ secrets.GCP_SA_KEY }}"
       - name: Set up Cloud SDK
-        uses: google-github-actions/setup-gcloud@v0
+        uses: google-github-actions/setup-gcloud@v2
       - name: Deploy
         run: gsutil -m -h "Cache-Control:no-store" rsync -x "^reearth_config\\.json$" -dr reearth-marketplace-web/ $GCS_DEST
   deploy_server:
@@ -52,18 +52,18 @@ jobs:
         with:
           app-id: ${{ vars.GH_APP_ID }}
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-      - uses: google-github-actions/auth@v0
+      - uses: google-github-actions/auth@v2
         with:
           credentials_json: ${{ secrets.GCP_SA_KEY }}
       #   with:
       #     workload_identity_provider: ${{ env.GCP_WORKLOAD_IDENTITY_PROVIDER }}
       #     service_account: ${{ env.GCP_SERVICE_ACCOUNT }}
       - name: Set up Cloud SDK
-        uses: google-github-actions/setup-gcloud@v0
+        uses: google-github-actions/setup-gcloud@v2
       - name: Configure docker
         run: gcloud auth configure-docker us-central1-docker.pkg.dev --quiet
       - name: Download server arfiacts
-        uses: dawidd6/action-download-artifact@v2
+        uses: dawidd6/action-download-artifact@v6
         with:
           github_token: ${{ steps.app-token.outputs.token }}
           workflow: build.yml

.github/workflows/pr_title.yml

@@ -11,7 +11,7 @@ jobs:
   pr_title:
     runs-on: ubuntu-latest
     steps:
-      - uses: amannn/action-semantic-pull-request@v4
+      - uses: amannn/action-semantic-pull-request@v5
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           ignoreLabels: meta

.github/workflows/release.yml

@@ -30,7 +30,7 @@ jobs:
           git config --global user.name $GH_APP_USER
           git config --global pull.rebase false
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
           token: ${{ steps.app-token.outputs.token }}
@@ -42,7 +42,7 @@ jobs:
           repo: ${{ github.repository }}
           latest: CHANGELOG_latest.md
       - name: Upload latest CHANGELOG
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: changelog-${{ steps.changelog.outputs.version }}
           path: CHANGELOG_latest.md

.github/workflows/stage.yml

@@ -19,7 +19,7 @@ jobs:
         run: |
           git config --global user.name $GH_APP_USER
           git config --global pull.rebase false
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           fetch-depth: 0
           token: ${{ steps.app-token.outputs.token }}