ci: bump the github-actions group with 6 updates

.github/workflows/cd-publish-release.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: main
           fetch-depth: 0

.github/workflows/cd-release-pr.yml

@@ -21,7 +21,7 @@ jobs:
       !contains(github.event.head_commit.message, 'chore: bump version')
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0

.github/workflows/ci.yml

@@ -30,15 +30,15 @@ jobs:
       PUBLIC_CONVEX_URL: "https://example.convex.cloud"
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
         with:
           bun-version: 1.3.8
 
       - name: Cache Bun + Turbo
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.bun/install/cache
@@ -76,15 +76,15 @@ jobs:
       PUBLIC_CONVEX_URL: "https://example.convex.cloud"
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
         with:
           bun-version: 1.3.8
 
       - name: Cache Bun + Turbo
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.bun/install/cache

.github/workflows/codeql.yml

@@ -23,13 +23,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: javascript-typescript
           queries: security-extended
 
       - name: Analyze
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4

.github/workflows/org-required-checks.yml

@@ -24,7 +24,7 @@ jobs:
       statuses: read
     steps:
       - name: Wait for merge gates
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const owner = context.repo.owner;

.github/workflows/preview-seed.yml

@@ -33,7 +33,7 @@ jobs:
     steps:
       - name: Resolve pull request context
         id: pr
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         env:
           DEPLOY_REF: ${{ env.DEPLOYMENT_REF }}
           DEPLOY_SHA: ${{ env.DEPLOYMENT_SHA }}
@@ -169,7 +169,7 @@ jobs:
 
       - name: Checkout
         if: steps.pr.outputs.skip != 'true'
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup Bun
         if: steps.pr.outputs.skip != 'true'
@@ -221,15 +221,15 @@ jobs:
       - name: Upload browser QA artifacts
         id: upload_browser_qa
         if: steps.pr.outputs.skip != 'true'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: browser-qa-preview-${{ github.event.deployment.id }}
           path: artifacts/browser-qa-preview/**
           if-no-files-found: error
 
       - name: Comment browser QA links on PR
         if: steps.pr.outputs.skip != 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         env:
           ARTIFACT_URL: ${{ steps.upload_browser_qa.outputs.artifact-url }}
           REPLAY_URL: ${{ steps.browser_qa_meta.outputs.replay_url }}

.github/workflows/tui-release.yml

@@ -28,7 +28,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
@@ -66,7 +66,7 @@ jobs:
           "$hash *${{ matrix.exec_name }}" | Set-Content "apps/tui/dist/${{ matrix.exec_name }}.sha256"
 
       - name: Upload binary artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: ${{ matrix.asset_name }}
           path: |
@@ -83,15 +83,15 @@ jobs:
       RELEASE_QA_TARGET_URL: ${{ vars.RELEASE_QA_TARGET_URL }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@v2
         with:
           bun-version: 1.3.8
 
       - name: Cache Bun + Turbo
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.bun/install/cache
@@ -101,7 +101,7 @@ jobs:
             ${{ runner.os }}-bun-turbo-
 
       - name: Cache Playwright browsers
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.cache/ms-playwright
           key: ${{ runner.os }}-playwright-${{ hashFiles('**/bun.lock', '**/bun.lockb', 'package.json', 'apps/**/package.json', 'packages/**/package.json') }}
@@ -137,7 +137,7 @@ jobs:
               --out-dir artifacts/browser-qa-release
 
       - name: Upload browser QA artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: browser-qa-release
           path: artifacts/browser-qa-release/**
@@ -151,7 +151,7 @@ jobs:
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           path: release-assets