chore(deps): bump the actions group across 1 directory with 9 updates

.github/workflows/auto-release.yml

@@ -50,7 +50,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 2
 
@@ -105,7 +105,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0
@@ -172,7 +172,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.ref }}
 
@@ -212,7 +212,7 @@ jobs:
           hatch build
 
       - name: 💾 Upload build artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: packages-${{ github.sha }}
           path: |
@@ -230,7 +230,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.ref }}
 
@@ -248,7 +248,7 @@ jobs:
           node scripts/sync-versions.js release ${{ needs.detect-release.outputs.release_type }} ${{ needs.detect-release.outputs.channel }} > /dev/null
 
       - name: 📥 Download build artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: packages-${{ github.sha }}
           path: ./artifacts/
@@ -301,7 +301,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.ref }}
 
@@ -323,7 +323,7 @@ jobs:
           node scripts/sync-versions.js release ${{ needs.detect-release.outputs.release_type }} ${{ needs.detect-release.outputs.channel }} > /dev/null
 
       - name: 📥 Download build artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: packages-${{ github.sha }}
           path: ./artifacts/
@@ -361,13 +361,13 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.ref }}
           fetch-depth: 0
 
       - name: 📥 Download build artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: packages-${{ github.sha }}
           path: ./artifacts/
@@ -443,7 +443,7 @@ jobs:
           EOF
 
       - name: 🚀 Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: v${{ needs.bump-version.outputs.new_version }}
           name: v${{ needs.bump-version.outputs.new_version }}

.github/workflows/benchmark.yml

@@ -17,8 +17,8 @@ jobs:
     env:
       HUSKY: "0"
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v6
         with:
           node-version: 22
           cache: npm
@@ -38,7 +38,7 @@ jobs:
         run: node compare-baseline.mjs results.json baseline.json
       - name: Post PR comment
         if: github.event_name == 'pull_request'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs');

.github/workflows/ci-js.yml

@@ -48,7 +48,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -97,7 +97,7 @@ jobs:
           fi
 
       - name: 📈 Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v7
         with:
           file: ${{ env.PACKAGE_DIR }}/coverage/lcov.info
           flags: javascript
@@ -106,7 +106,7 @@ jobs:
           verbose: true
 
       - name: 💾 Cache build outputs
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ${{ env.PACKAGE_DIR }}/dist/
           key: js-build-${{ runner.os }}-node${{ matrix.node-version }}-${{ hashFiles('packages/js/src/**/*', 'packages/js/tsconfig.json', 'packages/js/package.json') }}
@@ -115,7 +115,7 @@ jobs:
             js-build-${{ runner.os }}-
 
       - name: 💾 Upload build artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         if: matrix.node-version == 18  # Only upload once
         with:
           name: js-build-artifacts-${{ github.sha }}

.github/workflows/ci-py.yml

@@ -41,7 +41,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -102,7 +102,7 @@ jobs:
           fi
 
       - name: 📈 Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v7
         continue-on-error: true
         with:
           file: ${{ env.PACKAGE_DIR }}/coverage.xml
@@ -116,7 +116,7 @@ jobs:
         run: hatch build
 
       - name: 💾 Cache Python packages
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             ~/.cache/pip
@@ -127,7 +127,7 @@ jobs:
             py-deps-${{ runner.os }}-
 
       - name: 💾 Upload build artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         if: matrix.python-version == '3.11'  # Only upload once
         with:
           name: py-build-artifacts-${{ github.sha }}

.github/workflows/ci.yml

@@ -38,7 +38,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0  # Needed for codecov and semantic-release
 
@@ -88,7 +88,7 @@ jobs:
           fi
 
       - name: 📈 Upload coverage to Codecov
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v7
         with:
           file: ${{ env.PACKAGE_DIR }}/coverage/lcov.info
           flags: glin-profanity
@@ -97,7 +97,7 @@ jobs:
           verbose: true
 
       - name: 💾 Upload build artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: build-artifacts-${{ github.sha }}
           path: |
@@ -106,7 +106,7 @@ jobs:
           retention-days: 7
 
       - name: 💾 Upload test results
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: test-results-${{ github.sha }}

.github/workflows/dependency-review.yml

@@ -20,10 +20,10 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: 🔒 Dependency Review
-        uses: actions/dependency-review-action@v4
+        uses: actions/dependency-review-action@v5
         with:
           comment-summary-in-pr: always
           fail-on-severity: moderate

.github/workflows/release-mcp.yml

@@ -42,7 +42,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 2
 
@@ -91,7 +91,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: 🔧 Setup Node.js
         uses: actions/setup-node@v6
@@ -116,7 +116,7 @@ jobs:
           npm pack
 
       - name: 💾 Upload build artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: mcp-package-${{ github.sha }}
           path: packages/mcp/*.tgz
@@ -132,7 +132,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: 🔧 Setup Node.js
         uses: actions/setup-node@v6
@@ -191,12 +191,12 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: 📥 Download build artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: mcp-package-${{ github.sha }}
           path: ./artifacts/
@@ -267,7 +267,7 @@ jobs:
           sed -i "s/\$VERSION/$VERSION/g" release_notes.md
 
       - name: 🚀 Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: mcp-v${{ needs.detect-release.outputs.new_version }}
           name: "glin-profanity-mcp v${{ needs.detect-release.outputs.new_version }}"

.github/workflows/release-openclaw.yml

@@ -42,7 +42,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 2
 
@@ -91,7 +91,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: 🔧 Setup Node.js
         uses: actions/setup-node@v6
@@ -116,7 +116,7 @@ jobs:
           npm pack
 
       - name: 💾 Upload build artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: openclaw-package-${{ github.sha }}
           path: packages/openclaw/*.tgz
@@ -132,7 +132,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: 🔧 Setup Node.js
         uses: actions/setup-node@v6
@@ -184,12 +184,12 @@ jobs:
 
     steps:
       - name: 📥 Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: 📥 Download build artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: openclaw-package-${{ github.sha }}
           path: ./artifacts/
@@ -250,7 +250,7 @@ jobs:
           sed -i "s/\$VERSION/$VERSION/g" release_notes.md
 
       - name: 🚀 Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: openclaw-v${{ needs.detect-release.outputs.new_version }}
           name: "openclaw-profanity v${{ needs.detect-release.outputs.new_version }}"