CI: retire Node 20-era action majors across workflows

checkout v6->v7, setup-python v6->v7, cache v5->v6 (incl.
restore/save), setup-qemu-action v3->v4.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: prmoore77

.github/workflows/ci.yml

@@ -46,7 +46,7 @@ jobs:
       bin_suffix: ${{ matrix.duckdb_channel == 'lts' && '_lts' || '' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Install build requirements
         env:
@@ -72,7 +72,7 @@ jobs:
 
       - name: Restore Arrow cache
         id: arrow-cache
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@v6
         with:
           path: build/third_party
           key: arrow-macos-arm64-${{ matrix.duckdb_channel }}-apache-arrow-25.0.0-${{ hashFiles('third_party/Arrow_CMakeLists.txt.in', 'third_party/patch_arrow.cmake') }}
@@ -101,7 +101,7 @@ jobs:
 
       - name: Save Arrow cache
         if: steps.arrow-cache.outputs.cache-hit != 'true'
-        uses: actions/cache/save@v5
+        uses: actions/cache/save@v6
         with:
           path: build/third_party
           key: arrow-macos-arm64-${{ matrix.duckdb_channel }}-apache-arrow-25.0.0-${{ hashFiles('third_party/Arrow_CMakeLists.txt.in', 'third_party/patch_arrow.cmake') }}
@@ -130,7 +130,7 @@ jobs:
           cd build && bash ../tests/test_client_shell.sh
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 
@@ -259,14 +259,14 @@ jobs:
           --health-retries 5
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       # Build deps (compilers, Boost, OpenSSL, ...) live inside the manylinux
       # build container — the host only needs docker, python, and zip (all
       # preinstalled on the runner image).
       - name: Restore Arrow cache
         id: arrow-cache
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@v6
         with:
           # portable-deps holds the static OpenSSL + Boost prefixes built by
           # scripts/build_portable_linux.sh (stamp-file guarded).
@@ -333,7 +333,7 @@ jobs:
 
       - name: Save Arrow cache
         if: steps.arrow-cache.outputs.cache-hit != 'true'
-        uses: actions/cache/save@v5
+        uses: actions/cache/save@v6
         with:
           path: |
             build/third_party
@@ -391,7 +391,7 @@ jobs:
           cd build && bash ../tests/test_client_shell.sh
 
       - name: Set up Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 
@@ -562,7 +562,7 @@ jobs:
       unsigned_artifact: gizmosql-windows-${{ matrix.platform }}-unsigned${{ matrix.duckdb_channel == 'lts' && '-lts' || '' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -584,7 +584,7 @@ jobs:
 
       - name: Restore vcpkg cache
         id: vcpkg-cache
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@v6
         with:
           path: ${{ env.VCPKG_ROOT }}/installed
           key: vcpkg-${{ env.VCPKG_DEFAULT_TRIPLET }}-${{ hashFiles('.github/workflows/ci.yml') }}
@@ -598,7 +598,7 @@ jobs:
 
       - name: Save vcpkg cache
         if: steps.vcpkg-cache.outputs.cache-hit != 'true'
-        uses: actions/cache/save@v5
+        uses: actions/cache/save@v6
         with:
           path: ${{ env.VCPKG_ROOT }}/installed
           key: vcpkg-${{ env.VCPKG_DEFAULT_TRIPLET }}-${{ hashFiles('.github/workflows/ci.yml') }}
@@ -619,7 +619,7 @@ jobs:
 
       - name: Restore Arrow cache
         id: arrow-cache
-        uses: actions/cache/restore@v5
+        uses: actions/cache/restore@v6
         with:
           path: build/third_party
           key: arrow-windows-${{ matrix.vc_arch }}-${{ matrix.duckdb_channel }}-apache-arrow-25.0.0-${{ hashFiles('third_party/Arrow_CMakeLists.txt.in', 'third_party/patch_arrow.cmake') }}
@@ -646,7 +646,7 @@ jobs:
 
       - name: Save Arrow cache
         if: steps.arrow-cache.outputs.cache-hit != 'true'
-        uses: actions/cache/save@v5
+        uses: actions/cache/save@v6
         with:
           path: build/third_party
           key: arrow-windows-${{ matrix.vc_arch }}-${{ matrix.duckdb_channel }}-apache-arrow-25.0.0-${{ hashFiles('third_party/Arrow_CMakeLists.txt.in', 'third_party/patch_arrow.cmake') }}
@@ -765,7 +765,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       # The signed artifact already carries the arch-matched VC++ runtime
       # DLLs (vcruntime140, vcruntime140_1, msvcp140) from the build runner's
@@ -878,7 +878,7 @@ jobs:
       attestations: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Download CLI zip artifacts
         uses: actions/download-artifact@v8
@@ -1095,10 +1095,10 @@ jobs:
             sfx: "-slim"
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v4
@@ -1147,7 +1147,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Download all CLI artifacts
         uses: actions/download-artifact@v8
@@ -1175,7 +1175,7 @@ jobs:
           echo "linux_amd64_sha_lts=${LINUX_AMD64_SHA_LTS}" >> $GITHUB_OUTPUT
 
       - name: Checkout homebrew-tap
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: gizmodata/homebrew-tap
           token: ${{ secrets.HOMEBREW_TAP_TOKEN }}
@@ -1371,7 +1371,7 @@ jobs:
       EXPORT_PATH: ios/GizmoSQL/build/export
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           submodules: recursive
 
@@ -1400,7 +1400,7 @@ jobs:
       # Key on the inputs that materially change the output.
       - name: Cache iOS dependency build
         id: ios-deps-cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             ios/build/libs

.github/workflows/deploy-docs.yml

@@ -50,15 +50,15 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Setup Pages
         uses: actions/configure-pages@v6
 
       - name: Setup Python
-        uses: actions/setup-python@v6
+        uses: actions/setup-python@v7
         with:
           python-version: '3.12'
 

.github/workflows/test-msi.yml

@@ -19,7 +19,7 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Install WiX Toolset
         run: |

CHANGELOG.md

@@ -8,6 +8,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 
 ### Changed
+- CI: bumped `actions/checkout` to v7, `actions/setup-python` to v7,
+  `actions/cache` (incl. restore/save) to v6, and
+  `docker/setup-qemu-action` to v4 — retiring Node 20-era action majors
+  across all workflows.
 - **ADBC driver 2.0**: docs, examples, and the integration-test
   `requirements.txt` now use [`adbc-driver-gizmosql`](https://pypi.org/project/adbc-driver-gizmosql/)
   2.x (the `<2.0.0` cap was removed), which is powered by the