chore(deps): bump the github-actions group with 4 updates

.github/workflows/edge.yml

@@ -34,7 +34,7 @@ jobs:
       matrix:
         node: [ "23" ]
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - run: .ci/scripts/test.sh -b "nightly" "${{ matrix.node }}"
 
   # This should list all the Node.js major versions listed at
@@ -55,7 +55,7 @@ jobs:
           - "20"
           - "18"
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - run: .ci/scripts/test.sh -b "rc" "${{ matrix.node }}"
         env:
           VERSION: ${{ matrix.node }}

.github/workflows/release.yml

@@ -20,11 +20,11 @@ jobs:
     env:
       DOCKER_IMAGE_NAME: docker.elastic.co/observability/apm-agent-nodejs
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-node@v6.4.0
+      - uses: actions/setup-node@v7.0.0
         with:
           # Require npm 11.5.1 or later for https://docs.npmjs.com/trusted-publishers.
           node-version: 'v24.8.0'
@@ -46,7 +46,7 @@ jobs:
       - run: make -C .ci dist
 
       - name: Attest Lambda layer zip
-        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763  # v4.1.1
+        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6  # v4.2.0
         with:
           subject-path: "${{ github.workspace }}/build/aws/elastic-apm-node-lambda-layer-*.zip"
 
@@ -77,7 +77,7 @@ jobs:
             AGENT_DIR=/build/dist/nodejs
 
       - name: Attest Docker image
-        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763  # v4.1.1
+        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6  # v4.2.0
         with:
           subject-name: "${{ env.DOCKER_IMAGE_NAME }}"
           subject-digest: ${{ steps.docker-push.outputs.digest }}
@@ -111,7 +111,7 @@ jobs:
             AGENT_DIR=/build/dist/nodejs
 
       - name: Attest Docker image (wolfi)
-        uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763  # v4.1.1
+        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6  # v4.2.0
         with:
           subject-name: "${{ env.DOCKER_IMAGE_NAME }}"
           subject-digest: ${{ steps.docker-push-wolfi.outputs.digest }}

.github/workflows/slack-lite.yml

@@ -122,7 +122,7 @@ jobs:
             f.write("payload={}".format(json.dumps(payload)))
 
       - name: Post Slack message
-        uses: slackapi/slack-github-action@v3.0.5
+        uses: slackapi/slack-github-action@v4.0.0
         with:
           method: chat.postMessage
           token: ${{ secrets.SLACK_BOT_TOKEN }}

.github/workflows/tav-command.yml

@@ -41,7 +41,7 @@ jobs:
               return;
             }
 
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
@@ -141,7 +141,7 @@ jobs:
         module_and_node: ${{ fromJSON(needs.command-validation.outputs.permutations) }}
     steps:
 
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 

.github/workflows/tav.yml

@@ -27,7 +27,7 @@ jobs:
       permutations: ${{ steps.transform.outputs.permutations }}
     steps:
 
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
 
       - id: transform
         name: Load matrix from tav.json
@@ -70,7 +70,7 @@ jobs:
         # https://docs.github.com/en/actions/learn-github-actions/usage-limits-billing-and-administration
         module_and_node: ${{ fromJSON(needs.prepare-matrix.outputs.permutations) }}
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - run: .ci/scripts/test.sh -b "release" -t ${{ matrix.module_and_node }}
         env:
           ELASTIC_APM_CONTEXT_MANAGER: ''

.github/workflows/test-fips.yml

@@ -30,7 +30,7 @@ jobs:
       - run: |
           apk update
           apk add nodejs npm
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
       - name: Is Node.js running in FIPS mode?
         run: |
           node -e 'const isFips = require("node:crypto").getFips(); console.log("isFips:", isFips); assert(isFips)'

.github/workflows/test.yml

@@ -34,8 +34,8 @@ jobs:
   lint:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v7.0.0
-      - uses: actions/setup-node@v6.4.0
+      - uses: actions/checkout@v7.0.1
+      - uses: actions/setup-node@v7.0.0
         with:
           node-version: 18
       - run: npm ci
@@ -160,8 +160,8 @@ jobs:
           - '14.17'
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/checkout@v7.0.0
-    - uses: actions/setup-node@v6.4.0
+    - uses: actions/checkout@v7.0.1
+    - uses: actions/setup-node@v7.0.0
       with:
         node-version: ${{ matrix.node }}
     - run: docker ps  # show the services against which we'll be testing
@@ -173,8 +173,8 @@ jobs:
   test-windows:
     runs-on: windows-latest
     steps:
-    - uses: actions/checkout@v7.0.0
-    - uses: actions/setup-node@v6.4.0
+    - uses: actions/checkout@v7.0.1
+    - uses: actions/setup-node@v7.0.0
       with:
         # What Node.js version to test on Windows is a balance between which
         # is the current LTS version (https://github.com/nodejs/release) and

.github/workflows/updatecli.yml

@@ -15,7 +15,7 @@ jobs:
       contents: read
       packages: read
     steps:
-      - uses: actions/checkout@v7.0.0
+      - uses: actions/checkout@v7.0.1
 
       - name: Get token
         id: get_token