Upgrade GitHub Actions for Node 24 compatibility

Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>

Author: salmanmkc

.github/workflows/auto-update-Dockerfiles.yml

@@ -10,6 +10,8 @@ on:
     - cron: '0 0 * * *'
   # Allows to run this workflow manually from the Actions tab for testing
   workflow_dispatch:
+    
+
 
 jobs:
   auto-update:
@@ -21,11 +23,10 @@ jobs:
       NET_9_ARM64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net9/arm64/Dockerfile"
       NET_10_AMD64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net10/amd64/Dockerfile"
       NET_10_ARM64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net10/arm64/Dockerfile"
-      NET_11_AMD64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net11/amd64/Dockerfile"
-      NET_11_ARM64_Dockerfile: "LambdaRuntimeDockerfiles/Images/net11/arm64/Dockerfile"
 
     steps:
-      - uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2 # v4.2.2
+      # Checks-out the repository under $GITHUB_WORKSPACE
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           ref: 'dev'
 
@@ -113,82 +114,39 @@ jobs:
             Write-Host "Skipping .NET 10 ARM64 update - No version detected"
           }
 
-      # Update .NET 11 AMD64 Dockerfile
-      - name: Update .NET 11 AMD64
-        id: update-net11-amd64
-        shell: pwsh
-        env:
-          DOCKERFILE_PATH: ${{ env.NET_11_AMD64_Dockerfile }}
-        run: |
-          $version = & "./LambdaRuntimeDockerfiles/get-latest-aspnet-versions.ps1" -MajorVersion "11"
-          if (-not [string]::IsNullOrEmpty($version)) {
-            & "./LambdaRuntimeDockerfiles/update-dockerfile.ps1" -DockerfilePath "${{ env.DOCKERFILE_PATH }}" -NextVersion $version
-          } else {
-            Write-Host "Skipping .NET 11 AMD64 update - No version detected"
-          }
-
-      # Update .NET 11 ARM64 Dockerfile
-      - name: Update .NET 11 ARM64
-        id: update-net11-arm64
-        shell: pwsh
-        env:
-          DOCKERFILE_PATH: ${{ env.NET_11_ARM64_Dockerfile }}
-        run: |
-          $version = & "./LambdaRuntimeDockerfiles/get-latest-aspnet-versions.ps1" -MajorVersion "11"
-          if (-not [string]::IsNullOrEmpty($version)) {
-            & "./LambdaRuntimeDockerfiles/update-dockerfile.ps1" -DockerfilePath "${{ env.DOCKERFILE_PATH }}" -NextVersion $version
-          } else {
-            Write-Host "Skipping .NET 11 ARM64 update - No version detected"
-          }
-
       # Commit changes and create a branch
       - name: Commit and Push
         id: commit-push
         shell: pwsh
         run: |
-          git config --global user.email "github-aws-sdk-dotnet-automation@amazon.com"
-          git config --global user.name "aws-sdk-dotnet-automation"
-
-          $remoteBranch = "chore/auto-update-Dockerfiles-daily"
-
-          # Try to fetch the remote branch (it may not exist yet)
-          git fetch origin $remoteBranch 2>$null
-          $remoteExists = ($LASTEXITCODE -eq 0)
-
           # Check if there are any changes to commit
           if (git status --porcelain) {
-
+            git config --global user.email "github-aws-sdk-dotnet-automation@amazon.com"
+            git config --global user.name "aws-sdk-dotnet-automation"
+            
             # Generate timestamp for unique local branch name
             $timestamp = Get-Date -Format "yyyyMMddHHmmss"
             $localBranch = "chore/auto-update-Dockerfiles-daily-$timestamp"
-
+            $remoteBranch = "chore/auto-update-Dockerfiles-daily"
+            
             # Always create a new unique local branch
             git checkout -b $localBranch
-
+            
             git add "**/*Dockerfile"
             git commit -m "chore: Daily ASP.NET Core version update in Dockerfiles"
-
-            # If remote branch exists and there is no diff vs remote branch, skip pushing and PR creation
-            if ($remoteExists) {
-              git diff --quiet "origin/$remoteBranch...HEAD"
-              if ($LASTEXITCODE -eq 0) {
-                echo "No diff vs origin/$remoteBranch. Skipping push/PR creation."
-                Add-Content -Path $env:GITHUB_OUTPUT -Value "CHANGES_MADE=false"
-                exit 0
-              }
-            }
-
-            # Only now delete + push (because we know it's different)
+            
+            # Always delete the remote branch before pushing to avoid stale branch errors
             git push origin --delete $remoteBranch 2>$null
+            
+            # Push local branch to remote branch (force push to consistent remote branch name)
             git push --force origin "${localBranch}:${remoteBranch}"
-
+            
             # Write the remote branch name to GITHUB_OUTPUT for use in the PR step
             Add-Content -Path $env:GITHUB_OUTPUT -Value "BRANCH=$remoteBranch"
             Add-Content -Path $env:GITHUB_OUTPUT -Value "CHANGES_MADE=true"
             echo "Changes committed to local branch $localBranch and pushed to remote branch $remoteBranch"
           } else {
             echo "No changes detected in Dockerfiles, skipping PR creation"
-            Add-Content -Path $env:GITHUB_OUTPUT -Value "CHANGES_MADE=false"
           }
 
       # Create a Pull Request
@@ -201,27 +159,25 @@ jobs:
           destination_branch: "dev"
           pr_title: 'chore: Daily ASP.NET Core version update in Dockerfiles'
           pr_body: "This PR automatically updates the Dockerfiles to use the latest ASP.NET Core version.
-
+            
             Verify that the Dockerfiles have correct versions and matching SHA512 checksums for ASP.NET Core runtime.
-
+            
             All .NET versions: https://dotnet.microsoft.com/en-us/download/dotnet
-
+            
             *Description of changes:*
             \n${{ format
-            (
-            '{0}\n{1}\n{2}\n{3}\n{4}\n{5}\n{6}\n{7}',
-            join(steps.update-net8-amd64.outputs.MESSAGE, '\n'),
-            join(steps.update-net8-arm64.outputs.MESSAGE, '\n'),
-            join(steps.update-net9-amd64.outputs.MESSAGE, '\n'),
-            join(steps.update-net9-arm64.outputs.MESSAGE, '\n'),
-            join(steps.update-net10-amd64.outputs.MESSAGE, '\n'),
-            join(steps.update-net10-arm64.outputs.MESSAGE, '\n'),
-            join(steps.update-net11-amd64.outputs.MESSAGE, '\n'),
-            join(steps.update-net11-arm64.outputs.MESSAGE, '\n')
-            )
+                (
+                  '{0}\n{1}\n{2}\n{3}\n{4}\n{5}',
+                  join(steps.update-net8-amd64.outputs.MESSAGE, '\n'),
+                  join(steps.update-net8-arm64.outputs.MESSAGE, '\n'),
+                  join(steps.update-net9-amd64.outputs.MESSAGE, '\n'),
+                  join(steps.update-net9-arm64.outputs.MESSAGE, '\n'),
+                  join(steps.update-net10-amd64.outputs.MESSAGE, '\n'),
+                  join(steps.update-net10-arm64.outputs.MESSAGE, '\n')
+                )
             }}"
           github_token: ${{ secrets.GITHUB_TOKEN }}
-
+          
       # Add "Release Not Needed" label to the PR
       - name: Add Release Not Needed label
         if: ${{ steps.pull-request.outputs.pr_number }}

.github/workflows/change-file-in-pr.yml

@@ -12,7 +12,7 @@ jobs:
 
     steps:
       - name: Checkout PR code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Get List of Changed Files
         id: changed-files

.github/workflows/create-release-pr.yml

@@ -13,7 +13,6 @@ on:
 
 permissions:
   id-token: write
-  repository-projects: read
 
 jobs:
   release-pr:
@@ -26,38 +25,33 @@ jobs:
     steps:
       # Assume an AWS Role that provides access to the Access Token
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 #v6.0.0
+        uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 #v5.1.1
         with:
           role-to-assume: ${{ secrets.RELEASE_WORKFLOW_ACCESS_TOKEN_ROLE_ARN }}
           aws-region: us-west-2
       # Retrieve the Access Token from Secrets Manager
       - name: Retrieve secret from AWS Secrets Manager
-        uses: aws-actions/aws-secretsmanager-get-secrets@3a411b6ec5cace3d626412dd917e7bfeac242cfa #v3.0.0
+        uses: aws-actions/aws-secretsmanager-get-secrets@a9a7eb4e2f2871d30dc5b892576fde60a2ecc802 #v2.0.10
         with:
           secret-ids: |
             AWS_SECRET, ${{ secrets.RELEASE_WORKFLOW_ACCESS_TOKEN_NAME }}
           parse-json-secrets: true
       # Checkout a full clone of the repo
       - name: Checkout
-        uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2 #v4.2.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           fetch-depth: "0"
           token: ${{ env.AWS_SECRET_TOKEN }}
       # Install .NET9 which is needed for AutoVer
       - name: Setup .NET 9.0
-        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 #v5.2.0
+        uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309  # v5.1.0
         with:
           dotnet-version: 9.0.x
       # Install .NET10 which is needed for building the solution
       - name: Setup .NET 10.0
-        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 #v5.2.0
+        uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309  # v5.1.0
         with:
           dotnet-version: 10.0.x
-      # Install .NET11 which is needed for building the solution
-      - name: Setup .NET 11.0
-        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 #v5.2.0
-        with:
-          dotnet-version: 11.0.x
       # Install AutoVer to automate versioning and changelog creation
       - name: Install AutoVer
         run: dotnet tool install --global AutoVer --version 0.0.25

.github/workflows/semgrep-analysis.yml

@@ -25,7 +25,7 @@ jobs:
     if: (github.actor != 'dependabot[bot]')
     steps:
       # Fetch project source
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - run: semgrep ci --sarif > semgrep.sarif
         env:

.github/workflows/sync-master-dev.yml

@@ -26,39 +26,34 @@ jobs:
     steps:
       # Assume an AWS Role that provides access to the Access Token
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7 #v6.0.0
+        uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 #v5.1.1
         with:
           role-to-assume: ${{ secrets.RELEASE_WORKFLOW_ACCESS_TOKEN_ROLE_ARN }}
           aws-region: us-west-2
       # Retrieve the Access Token from Secrets Manager
       - name: Retrieve secret from AWS Secrets Manager
-        uses: aws-actions/aws-secretsmanager-get-secrets@3a411b6ec5cace3d626412dd917e7bfeac242cfa #v3.0.0
+        uses: aws-actions/aws-secretsmanager-get-secrets@a9a7eb4e2f2871d30dc5b892576fde60a2ecc802 #v2.0.10
         with:
           secret-ids: |
             AWS_SECRET, ${{ secrets.RELEASE_WORKFLOW_ACCESS_TOKEN_NAME }}
           parse-json-secrets: true
       # Checkout a full clone of the repo
       - name: Checkout code
-        uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2 #v4.2.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           ref: dev
           fetch-depth: 0
           token: ${{ env.AWS_SECRET_TOKEN }}
       # Install .NET9 which is needed for AutoVer
       - name: Setup .NET 9.0
-        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 #v5.2.0
+        uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309  # v5.1.0
         with:
           dotnet-version: 9.0.x
       # Install .NET10 which is needed for building the solution
       - name: Setup .NET 10.0
-        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 #v5.2.0
+        uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309  # v5.1.0
         with:
           dotnet-version: 10.0.x
-      # Install .NET11 which is needed for building the solution
-      - name: Setup .NET 11.0
-        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 #v5.2.0
-        with:
-          dotnet-version: 11.0.x
       # Install AutoVer which is needed to retrieve information about the current release.
       - name: Install AutoVer
         run: dotnet tool install --global AutoVer --version 0.0.25
@@ -121,25 +116,20 @@ jobs:
     steps:
       # Checkout a full clone of the repo
       - name: Checkout code
-        uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2 #v4.2.2
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           ref: releases/next-release
           fetch-depth: 0
       # Install .NET9 which is needed for AutoVer
       - name: Setup .NET 9.0
-        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 #v5.2.0
+        uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309  # v5.1.0
         with:
           dotnet-version: 9.0.x
       # Install .NET10 which is needed for building the solution
       - name: Setup .NET 10.0
-        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 #v5.2.0
+        uses: actions/setup-dotnet@baa11fbfe1d6520db94683bd5c7a3818018e4309  # v5.1.0
         with:
           dotnet-version: 10.0.x
-      # Install .NET11 which is needed for building the solution
-      - name: Setup .NET 11.0
-        uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 #v5.2.0
-        with:
-          dotnet-version: 11.0.x
       # Install AutoVer which is needed to retrieve information about the current release.
       - name: Install AutoVer
         run: dotnet tool install --global AutoVer --version 0.0.25

.github/workflows/update-Dockerfiles.yml

@@ -81,7 +81,7 @@ jobs:
     # Steps represent a sequence of tasks that will be executed as part of the job
     steps:
       # Checks-out your repository under $GITHUB_WORKSPACE, so your job can access it
-      - uses: actions/checkout@85e6279cec87321a52edac9c87bce653a07cf6c2 #v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
         with:
           ref: 'dev'