(chore): Bump the github-actions group across 1 directory with 8 updates

.github/workflows/bundle-size.yml

@@ -18,7 +18,7 @@ jobs:
       TURBO_TEAM: ${{ github.repository_owner }}
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: 🚀 Setup a local cache server for Turborepo
         uses: felixmosh/turborepo-gh-artifacts@v4

.github/workflows/code-ql.yml

@@ -43,7 +43,7 @@ jobs:
 
     steps:
     - name: 🛒 Checkout repository
-      uses: actions/checkout@v6
+      uses: actions/checkout@v7
 
     # Initializes the CodeQL tools for scanning.
     - name: 🚀 Initialize CodeQL

.github/workflows/deploy-pages.yml

@@ -21,15 +21,15 @@ jobs:
       contents: read
       actions: read
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: 20
 
       - name: Cache dependencies
         id: cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: '**/node_modules'
           key: ${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}
@@ -66,10 +66,10 @@ jobs:
           cp -a packages/tooling/storybook/dist _site/storybook
 
       - name: Configure Pages
-        uses: actions/configure-pages@v5
+        uses: actions/configure-pages@v6
 
       - name: Upload Pages artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
 
   deploy:
     needs: build
@@ -83,4 +83,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deploy
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

.github/workflows/docs-build.yml

@@ -209,7 +209,7 @@ jobs:
       YARN_ENABLE_SCRIPTS: "0"
     steps:
       - name: Checkout PR head (sandboxed)
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ inputs.head_sha || github.event.pull_request.head.sha }}
           repository: ${{ inputs.head_repo || github.event.pull_request.head.repo.full_name }}
@@ -219,7 +219,7 @@ jobs:
           persist-credentials: false
 
       - name: Setup Node.js
-        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
+        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: 20
 
@@ -272,7 +272,7 @@ jobs:
       pushed_sha: ${{ steps.commit.outputs.pushed_sha }}
     steps:
       - name: Checkout the SHA the build ran against
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ inputs.head_sha || github.event.pull_request.head.sha }}
           repository: ${{ inputs.head_repo || github.event.pull_request.head.repo.full_name }}
@@ -373,7 +373,7 @@ jobs:
     steps:
       - name: Mint app token
         id: app-token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           client-id: ${{ secrets.OMRS_PR_BOT_CLIENT_ID }}
           private-key: ${{ secrets.OMRS_PR_BOT_PRIVATE_KEY }}

.github/workflows/docs-drift-check.yml

@@ -109,7 +109,7 @@ jobs:
       - name: Mint app token
         if: steps.labels.outputs.needs_provenance == 'true'
         id: app-token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           client-id: ${{ secrets.OMRS_PR_BOT_CLIENT_ID }}
           private-key: ${{ secrets.OMRS_PR_BOT_PRIVATE_KEY }}
@@ -150,7 +150,7 @@ jobs:
           steps.pr.outputs.skip != 'true' &&
           steps.labels.outputs.pass != 'true' &&
           steps.provenance.outputs.verified != 'true'
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           # Need full history so `git diff base...head` can resolve the
           # merge-base. blob:none keeps the clone cheap — `git diff

.github/workflows/docs-skip-label-guard.yml

@@ -27,7 +27,7 @@ jobs:
     steps:
       - name: Mint app token
         id: app-token
-        uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
+        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
         with:
           client-id: ${{ secrets.OMRS_PR_BOT_CLIENT_ID }}
           private-key: ${{ secrets.OMRS_PR_BOT_PRIVATE_KEY }}

.github/workflows/docs.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: tcort/github-action-markdown-link-check@v1
         with:
           max-depth: 4 # exclude the API docs

.github/workflows/e2e.yml

@@ -27,11 +27,11 @@ jobs:
 
     steps:
       - name: 📥 Checkout repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: 🔍 Check if any source code has changed
         id: changes
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@v4
         with:
           filters: |
             test-sources:
@@ -58,19 +58,19 @@ jobs:
 
     steps:
       - name: 📥 Checkout repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: 📄 Copy test environment variables
         run: cp example.env .env
 
       - name: 🛠️ Setup node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: 22
 
       - name: 💾 Cache dependencies
         id: cache-dependencies
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: '**/node_modules'
           key: ${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}
@@ -90,7 +90,7 @@ jobs:
 
       - name: 💾 Cache Playwright Browsers
         id: playwright-cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.cache/ms-playwright
           key: ${{ runner.os }}-playwright-${{ hashFiles('**/yarn.lock') }}
@@ -126,16 +126,16 @@ jobs:
 
     steps:
       - name: 📥 Checkout esm-core repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: 🛠️ Setup node
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: 22
 
       - name: 💾 Cache dependencies
         id: cache-dependencies
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: '**/node_modules'
           key: ${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}
@@ -157,7 +157,7 @@ jobs:
         run: bash e2e/support/github/run-e2e-docker-env.sh
 
       - name: 📥 Checkout to the ${{ matrix.repo }} main branch
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: openmrs/${{ matrix.repo }}
           ref: main
@@ -169,7 +169,7 @@ jobs:
 
       - name: 💾 Cache dependencies for ${{ matrix.repo }}
         id: cache-other-repo-dependencies
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: '**/node_modules'
           key: ${{ runner.os }}-${{ hashFiles('e2e_repo/**/yarn.lock') }}
@@ -181,7 +181,7 @@ jobs:
 
       - name: 💾 Cache Playwright Browsers for ${{ matrix.repo }}
         id: playwright-cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.cache/ms-playwright
           key: ${{ runner.os }}-playwright-${{ hashFiles('e2e_repo/**/yarn.lock') }}