build(deps): bump the actions-deps group across 1 directory with 6 updates

.github/workflows/biome.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: '20.19.0' # version that's pinned in Dockerfile for kpi release
@@ -21,7 +21,7 @@ jobs:
 
       # Cache: Use cache for node_modules
       #        Keyed on os, node version, package-lock, and patches
-      - uses: actions/cache@v5
+      - uses: actions/cache@v6
         name: Check for cached node_modules
         id: cache-nodemodules
         env:

.github/workflows/chromatic.yml

@@ -12,7 +12,7 @@ jobs:
       title: ${{ steps.get-head-commit-title.outputs.title }}
       sha: ${{ steps.get-head-commit-sha.outputs.sha }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: "main"
@@ -31,7 +31,7 @@ jobs:
     outputs:
       should-run: ${{ steps.should-run.outputs.should-run }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: "main"
       - name: Print latest commit
@@ -52,7 +52,7 @@ jobs:
       chromatic-url: ${{ steps.run-chromatic.outputs.url }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
           ref: "main"

.github/workflows/ci-pr.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on:     ubuntu-24.04
     permissions: { pull-requests: read }
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - id:   filter
         uses: dorny/paths-filter@v4
         name: Detect changed files

.github/workflows/codeql.yml

@@ -31,7 +31,7 @@ jobs:
           build-mode: none
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     # Add any setup steps before running the `github/codeql-action/init` action.
     # This includes steps like installing compilers or runtimes (`actions/setup-node`

.github/workflows/darker.yml

@@ -6,7 +6,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           # In addition to checking out the 'merge commit', we also want to
           # fetch enough commits to find the most recent commit in the base

.github/workflows/find-releases.yml

@@ -46,7 +46,7 @@ jobs:
       next_minor: ${{ steps.version.outputs.next_minor }}
       next_patch: ${{ steps.version.outputs.next_patch }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
         fetch-tags: true

.github/workflows/ghcr-cleanup.yml

@@ -11,7 +11,7 @@ jobs:
     permissions:
       packages: write
     steps:
-      - uses: snok/container-retention-policy@v3.0.1
+      - uses: snok/container-retention-policy@v3.1.0
         with:
           account: kobotoolbox
           token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/locale.yml

@@ -20,7 +20,7 @@ jobs:
 
     ## Setup
 
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0
 

.github/workflows/nonprod-releases.yml

@@ -25,14 +25,14 @@ jobs:
       kpi_image_sha: ${{ steps.sha.outputs.sha }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Store commit SHA
         id: sha
         run: echo "sha=${GITHUB_SHA}" >> $GITHUB_OUTPUT
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v6.1.1
+        uses: aws-actions/configure-aws-credentials@6.2.2
         with:
           aws-region: us-east-1
           role-to-assume: "arn:aws:iam::917503078660:role/gha_all_repos"

.github/workflows/npm-test.yml

@@ -8,9 +8,9 @@ jobs:
     outputs:
       playwright-version: ${{ steps.get_playwright_version.outputs.playwright-version }}
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - id: get_playwright_version
-        uses: eviden-actions/get-playwright-version@v1
+        uses: eviden-actions/get-playwright-version@v2
 
   build:
     runs-on: ubuntu-24.04
@@ -27,7 +27,7 @@ jobs:
       fail-fast: false # Let each job finish
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node-version }}
@@ -42,7 +42,7 @@ jobs:
 
       # Cache: Use cache for node_modules
       #        Keyed on os, node version, package-lock, and patches
-      - uses: actions/cache@v5
+      - uses: actions/cache@v6
         name: Check for cached node_modules
         id: cache-nodemodules
         env:
@@ -94,7 +94,7 @@ jobs:
 
       # Install Playwright (with cache) for Storybook tests
       - name: "Playwright: cache binaries"
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         id: playwright-cache
         with:
           path: ~/.cache/ms-playwright

.github/workflows/openapi.yml

@@ -41,7 +41,7 @@ jobs:
           - 6379:6379
     steps:
 
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Set up Python 3.12
         uses: actions/setup-python@v6
@@ -98,7 +98,7 @@ jobs:
     runs-on: ubuntu-24.04
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: actions/setup-node@v6
         with:
           node-version: 20.19.0  # version that's pinned in Dockerfile for kpi release. FYI v22 doesn't work out of box.
@@ -113,7 +113,7 @@ jobs:
 
       # Cache: Use cache for node_modules
       #        Keyed on os, node version, package-lock, and patches
-      - uses: actions/cache@v5
+      - uses: actions/cache@v6
         name: Check for cached node_modules
         id: cache-nodemodules
         env:

.github/workflows/pr-environments.yml

@@ -49,7 +49,7 @@ jobs:
 
 
       - name: Clone kpi repo at PR branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: kobotoolbox/kpi
           #if the input type is PR, use the branch name from the previous step; otherwise, use the input value directly as the branch name

.github/workflows/pytest.yml

@@ -47,7 +47,7 @@ jobs:
         ports:
           - 6379:6379
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Set up Python ${{ matrix.python-version }}
       uses: actions/setup-python@v6
       with:

.github/workflows/release-1-branch.yml

@@ -48,7 +48,7 @@ jobs:
     if: ${{ needs.version.outputs.prev_released == 'true' }}
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ./.github/actions/checkout-with-github-app-token
       with:
         app-id: ${{ secrets.KOBO_BOT_APP_ID }}

.github/workflows/release-2-stabilize.yml

@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-24.04
     permissions: { pull-requests: read }
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - id:   filter
         uses: dorny/paths-filter@v4
         name: Detect changed files
@@ -110,7 +110,7 @@ jobs:
       CURRENT_PATCH: ${{ needs.version.outputs.current_patch }}
     steps:
 
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ./.github/actions/checkout-with-github-app-token
       with:
         app-id: ${{ secrets.KOBO_BOT_APP_ID }}
@@ -143,7 +143,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
 
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ./.github/actions/checkout-with-github-app-token
       with:
         app-id: ${{ secrets.KOBO_BOT_APP_ID }}
@@ -187,7 +187,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
 
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - uses: ./.github/actions/checkout-with-github-app-token
       with:
         app-id: ${{ secrets.KOBO_BOT_APP_ID }}

.github/workflows/release-3-tag.yml

@@ -34,7 +34,7 @@ jobs:
     outputs:
       version: ${{ steps.version.outputs.version }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Formats the version number
       id: version
       run: |
@@ -82,7 +82,7 @@ jobs:
       - npm-test
     if: ${{ !cancelled() && !failure() }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: deploy to master
       run: |
@@ -100,7 +100,7 @@ jobs:
     needs:
       - deploy-to-master
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: Bump Kobotoolbox version in kobo-docker repo and tag it
       run: |
@@ -116,7 +116,7 @@ jobs:
   queue-deploy-to-production:
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
 
     - name: create Linear issue to deploy on Global
       run: |

.github/workflows/release-4-announce.yml

@@ -11,7 +11,7 @@ jobs:
     outputs:
       version: ${{ steps.version.outputs.version }}
     steps:
-    - uses: actions/checkout@v6
+    - uses: actions/checkout@v7
     - name: Formats the version number
       id: version
       run: |

.github/workflows/storybook-deploy.yml

@@ -21,7 +21,7 @@ jobs:
       url: ${{ steps.deployment.outputs.page_url }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Build Storybook
         run: |

.github/workflows/zulip.yml

@@ -44,7 +44,7 @@ jobs:
         } >> $GITHUB_OUTPUT
 
     - name: Send a stream message
-      uses: zulip/github-actions-zulip/send-message@v1
+      uses: zulip/github-actions-zulip/send-message@v2
       with:
         api-key: ${{ secrets.ZULIP_API_KEY_GITHUB_ACTIONS_BOT }}
         email: "github-actions-bot@chat.kobotoolbox.org"