perfectsense · dependabot · Mar 4, 2026
diff --git a/.github/workflows/aws-cloud-deploy.yml b/.github/workflows/aws-cloud-deploy.yml
@@ -122,9 +122,9 @@ jobs:
       caller-sha: ${{ steps.workflows-version.outputs.caller-sha }}
       account-id: ${{ steps.project-account.outputs.account-id }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: ${{ inputs.war-artifact-name }}
           path: brightspot-build
@@ -147,7 +147,7 @@ jobs:
           fi
           echo "account-id=$(echo $ACCOUNT_ID)" >> $GITHUB_OUTPUT
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           repository: perfectsense/brightspot-github-actions-workflows
           ref: ${{ steps.workflow-version.outputs.caller-sha }}
@@ -173,7 +173,7 @@ jobs:
         run: ./brightspot/aws/aws-s3-deploy.sh
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         if: ${{ inputs.deploy-container && env.cloud_aws_access_secret != '' }}
         with:
           aws-access-key-id: ${{ secrets.CLOUD_AWS_ACCESS_KEY_ID }}
@@ -188,13 +188,13 @@ jobs:
           echo "Brightspot Cloud ECR - ${{ vars.CLOUD_AWS_ACCOUNT_ID }}.dkr.ecr.${{ inputs.region }}.amazonaws.com"
 
       - name: Login to project ECR
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         if: ${{ inputs.deploy-container && env.cloud_aws_access_secret != '' }}
         with:
             registry: ${{ steps.project-account-id.outputs.account-id }}.dkr.ecr.${{ inputs.region }}.amazonaws.com
 
       - name: Login to Brightspot Cloud ECR
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         if: ${{ inputs.deploy-container && env.cloud_aws_access_secret != '' }}
         with:
             registry: ${{ vars.CLOUD_AWS_ACCOUNT_ID }}.dkr.ecr.${{ inputs.region }}.amazonaws.com
@@ -255,7 +255,7 @@ jobs:
           echo "container-build-tag=$(echo $BUILD_TAG)" >> $GITHUB_OUTPUT
           echo "container-version-tag=$(echo $VERSION_TAG)" >> $GITHUB_OUTPUT
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         if: ${{ inputs.publish-brightspot-version }}
         with:
           name: brightspot-version
@@ -281,9 +281,9 @@ jobs:
       caller-sha: ${{ steps.workflows-version.outputs.caller-sha }}
       account-id: ${{ steps.project-account.outputs.account-id }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: ${{ inputs.war-artifact-name }}
           path: brightspot-build
@@ -306,7 +306,7 @@ jobs:
           fi
           echo "account-id=$(echo $ACCOUNT_ID)" >> $GITHUB_OUTPUT
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           repository: perfectsense/brightspot-github-actions-workflows
           ref: ${{ steps.workflow-version.outputs.caller-sha }}
@@ -319,7 +319,7 @@ jobs:
           echo "GITHUB_ACTIONS_PULL_REQUEST=${{ github.event.pull_request.number }}" >> $GITHUB_ENV
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         if: ${{ inputs.deploy-container && env.cloud_aws_access_secret != '' }}
         with:
           aws-access-key-id: ${{ secrets.CLOUD_AWS_ACCESS_KEY_ID }}
@@ -334,13 +334,13 @@ jobs:
           echo "Brightspot Cloud ECR - ${{ vars.CLOUD_AWS_ACCOUNT_ID }}.dkr.ecr.${{ inputs.region }}.amazonaws.com"
 
       - name: Login to project ECR
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         if: ${{ inputs.deploy-container && env.cloud_aws_access_secret != '' }}
         with:
             registry: ${{ steps.project-account-id.outputs.account-id }}.dkr.ecr.${{ inputs.region }}.amazonaws.com
 
       - name: Login to Brightspot Cloud ECR
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         if: ${{ inputs.deploy-container && env.cloud_aws_access_secret != '' }}
         with:
             registry: ${{ vars.CLOUD_AWS_ACCOUNT_ID }}.dkr.ecr.${{ inputs.region }}.amazonaws.com
@@ -401,7 +401,7 @@ jobs:
           echo "container-build-tag=$(echo $BUILD_TAG)" >> $GITHUB_OUTPUT
           echo "container-version-tag=$(echo $VERSION_TAG)" >> $GITHUB_OUTPUT
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         if: ${{ inputs.publish-brightspot-version }}
         with:
           name: brightspot-version
@@ -431,7 +431,7 @@ jobs:
       matrix:
         jdk_version: [jdk11]
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Project Account ID
         id: project-account-id
@@ -502,7 +502,7 @@ jobs:
           echo "container-version-tag=$(echo $VERSION_TAG)" >> $GITHUB_OUTPUT
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         if: ${{ env.cloud_aws_access_secret != '' }}
         with:
           aws-access-key-id: ${{ secrets.CLOUD_AWS_ACCESS_KEY_ID }}
@@ -517,13 +517,13 @@ jobs:
           echo "Brightspot Cloud ECR - ${{ vars.CLOUD_AWS_ACCOUNT_ID }}.dkr.ecr.${{ inputs.region }}.amazonaws.com"
 
       - name: Login to project ECR
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         if: ${{ env.cloud_aws_access_secret != '' }}
         with:
             registry: ${{ steps.project-account-id.outputs.account-id }}.dkr.ecr.${{ inputs.region }}.amazonaws.com
 
       - name: Login to Brightspot Cloud ECR
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         if: ${{ env.cloud_aws_access_secret != '' }}
         with:
             registry: ${{ vars.CLOUD_AWS_ACCOUNT_ID }}.dkr.ecr.${{ inputs.region }}.amazonaws.com

diff --git a/.github/workflows/brightspot-build.yml b/.github/workflows/brightspot-build.yml
@@ -101,29 +101,29 @@ jobs:
             echo "${{ inputs.env3Name }}=${{ secrets.ENV_3_VALUE }}" >> $GITHUB_ENV
           fi
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
             lfs: true
 
         # must run before gradle/gradle-build-action
       - name: Validate Gradle wrapper JAR files
         if: ${{ inputs.build-gradle }}
-        uses: gradle/actions/wrapper-validation@v4
+        uses: gradle/actions/wrapper-validation@v5
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
             node-version: ${{ inputs.node-version }}
 
       - name: Set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           java-version: ${{ inputs.java-version }}
           distribution: ${{ inputs.java-distribution }}
 
       - name: Setup Gradle
         if: ${{ inputs.build-gradle }}
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@v5
         with:
           cache-disabled: ${{ inputs.gradle-action-cache-disable }}
 
@@ -133,15 +133,15 @@ jobs:
           echo "GITHUB_ACTIONS_TAG=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV
           echo "GITHUB_ACTIONS_PULL_REQUEST=${{ github.event.pull_request.number }}" >> $GITHUB_ENV
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           repository: perfectsense/brightspot-github-actions-workflows
           ref: v2
           path: ./brightspot
 
       - name: Maven Cache
         if: ${{ inputs.build-maven }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -150,7 +150,7 @@ jobs:
 
       - name: NPM Cache
         if: ${{ inputs.cache-npm}}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: |
             ~/.npm
@@ -175,14 +175,14 @@ jobs:
         run: ./brightspot/brightspot/build-gradle.sh
 
       - name: Publish JUnit test reports
-        uses: mikepenz/action-junit-report@v5
+        uses: mikepenz/action-junit-report@v6
         if: ${{ inputs.build-gradle && !cancelled() }}
         with:
           report_paths: '**/build/test-results/test/TEST-*.xml'
 
       - name: Store Build
         if: ${{ inputs.build-gradle || inputs.build-maven }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
             name: brightspot-build
             path: ${{ inputs.war-build-dir }}
@@ -195,7 +195,7 @@ jobs:
 
       - name: Store Brightspot Version
         if: ${{ inputs.build-gradle || inputs.build-maven }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
             name: brightspot-version
             path: brightspot-version.txt

diff --git a/.github/workflows/gcp-cloud-deploy.yml b/.github/workflows/gcp-cloud-deploy.yml
@@ -62,9 +62,9 @@ jobs:
       container-version-tag: ${{ steps.build-container.outputs.container-version-tag }}
       caller-sha: ${{ steps.workflows-version.outputs.caller-sha }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: brightspot-build
           path: brightspot-build
@@ -75,7 +75,7 @@ jobs:
           sha=$(curl -L -H "Accept: application/vnd.github+json" -H "Authorization: Bearer ${{ secrets.GITHUB_TOKEN }}" -H "X-GitHub-Api-Version: 2022-11-28" https://api.github.com/repos/${{ github.repository }}/actions/runs/${{ github.run_id }} | jq -r '.referenced_workflows[] | select(.path|contains("gcp-cloud-deploy")) | .sha')
           echo "caller-sha=$sha" >> $GITHUB_OUTPUT
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           repository: perfectsense/brightspot-github-actions-workflows
           ref: ${{ steps.workflow-version.outputs.caller-sha }}
@@ -88,12 +88,12 @@ jobs:
           echo "GITHUB_ACTIONS_PULL_REQUEST=${{ github.event.pull_request.number }}" >> $GITHUB_ENV
 
       - name: Set Up gcloud CLI
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@v3
         with:
           credentials_json: ${{ secrets.GCP_GCR_SECRET_KEY }}
 
       - name: Set up Cloud SDK
-        uses: google-github-actions/setup-gcloud@v2
+        uses: google-github-actions/setup-gcloud@v3
         with:
           version: "${{ inputs.gcloud-version }}"
 
@@ -164,7 +164,7 @@ jobs:
           echo "container-build-tag=$(echo $BUILD_TAG)" >> $GITHUB_OUTPUT
           echo "container-version-tag=$(echo $VERSION_TAG)" >> $GITHUB_OUTPUT
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: brightspot-version
           path: brightspot-version

diff --git a/.github/workflows/platform-plugin.yml b/.github/workflows/platform-plugin.yml
@@ -22,23 +22,23 @@ jobs:
     runs-on: ${{ inputs.build-runs-on }}
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Set up Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: 21
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@v4
+        uses: gradle/actions/setup-gradle@v5
         with:
           cache-read-only: ${{ github.ref_name != github.event.repository.default_branch && !startsWith(github.ref, 'refs/heads/release/') }}
 
       - name: Cache Sonar
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.sonar/cache
           key: ${{ runner.os }}-sonar
@@ -74,7 +74,7 @@ jobs:
               -PmavenPassword="$MAVEN_PASSWORD"
 
       - name: Process the unit test reports
-        uses: mikepenz/action-junit-report@v3
+        uses: mikepenz/action-junit-report@v6
         if: always()
         continue-on-error: true
         with:
@@ -89,7 +89,7 @@ jobs:
         run: GITHUB_EVENT_NAME="${EVENT}" ./gradlew sonar -i
 
       - name: Store the web WAR file
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: web
           path: web/build/libs

diff --git a/.github/workflows/s3-deploy.yml b/.github/workflows/s3-deploy.yml
@@ -72,9 +72,9 @@ jobs:
       caller-sha: ${{ steps.workflows-version.outputs.caller-sha }}
       account-id: ${{ steps.project-account.outputs.account-id }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@v8
         with:
           name: ${{ inputs.war-artifact-name }}
           path: brightspot-build
@@ -97,7 +97,7 @@ jobs:
           fi
           echo "account-id=$(echo $ACCOUNT_ID)" >> $GITHUB_OUTPUT
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           repository: perfectsense/brightspot-github-actions-workflows
           ref: ${{ steps.workflow-version.outputs.caller-sha }}

diff --git a/.github/workflows/sonar-cloud.yml b/.github/workflows/sonar-cloud.yml
@@ -104,28 +104,28 @@ jobs:
           if [ -n "${{ inputs.env3Name }}" ]; then
             echo "${{ inputs.env3Name }}=${{ secrets.ENV_3_VALUE }}" >> $GITHUB_ENV
           fi
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           fetch-depth: 0  # Shallow clones should be disabled for a better relevancy of analysis
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
             node-version: ${{ inputs.node-version }}
       - name: Set up JDK
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           java-version: ${{ inputs.java-version }}
           distribution: ${{ inputs.java-distribution }}
 
       - name: Cache SonarCloud packages
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.sonar/cache
           key: ${{ runner.os }}-sonar
           restore-keys: ${{ runner.os }}-sonar
 
       - name: Cache Gradle packages
-        uses: actions/cache@v4
+        uses: actions/cache@v5
         with:
           path: ~/.gradle/caches
           key: ${{ runner.os }}-gradle-${{ hashFiles('**/*.gradle') }}