Merge remote-tracking branch 'origin/HEAD' into bump_deps

Author: kevmoo

.github/workflows/code_health.yml

@@ -20,7 +20,7 @@ jobs:
   analyze:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v6.0.2
       - uses: subosito/flutter-action@v2
         with:
           channel: "stable"
@@ -34,7 +34,7 @@ jobs:
   pub_dry_run:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v6.0.2
       - uses: subosito/flutter-action@v2
         with:
           channel: "stable"
@@ -50,7 +50,7 @@ jobs:
   pub_get_check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v6.0.2
       - uses: subosito/flutter-action@v2
         with:
           channel: "stable"
@@ -67,7 +67,7 @@ jobs:
     # switch back to ubuntu-latest when swiftformat is working again
     runs-on: macos-latest
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v6.0.2
       - uses: subosito/flutter-action@v2
         with:
           channel: "stable"
@@ -100,7 +100,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v6.0.2
       - uses: actions/setup-go@v5
         with:
           go-version: "^1.13.1"

.github/workflows/e2e.yml

@@ -28,7 +28,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 45
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8
         name: Install Node.js
         with:
@@ -93,7 +93,7 @@ jobs:
     runs-on: macos-15
     timeout-minutes: 45
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8
         name: Install Node.js
         with:
@@ -171,7 +171,7 @@ jobs:
           npm i
           npm run build
           ../scripts/start-firebase-emulator.sh
-      - uses: futureware-tech/simulator-action@bde6805eedaeaba7775a9959970edc7d8bf10c4d
+      - uses: futureware-tech/simulator-action@727e3a60e55d5a20daccb3fe108f0fafdd18f70b
         id: simulator
         with:
           # List of available simulators: https://github.com/actions/runner-images/blob/main/images/macos/macos-14-Readme.md#installed-simulators
@@ -189,7 +189,7 @@ jobs:
     runs-on: macos-15
     timeout-minutes: 45
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8
         name: Install Node.js
         with:
@@ -253,7 +253,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
       - uses: subosito/flutter-action@2783a3f08e1baf891508463f8c6653c258246225
         with:
           channel: 'stable'

.github/workflows/ossf-scorecard.yml

@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3.1.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v3.1.0
         with:
           persist-credentials: false
 
@@ -59,14 +59,14 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
+        uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
         with:
           sarif_file: results.sarif

.github/workflows/unit_tests.yml

@@ -28,7 +28,7 @@ jobs:
       packages: ${{ steps.filter.outputs.changed_packages }}
       has_changes: ${{ steps.filter.outputs.changed_packages != '[]' }}
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v6.0.2
       - uses: ./.github/actions/changes
         id: filter
 
@@ -44,7 +44,7 @@ jobs:
         target: ["html", "io"]
 
     steps:
-      - uses: actions/checkout@v4.1.7
+      - uses: actions/checkout@v6.0.2
       - uses: subosito/flutter-action@v2
         with:
           channel: "stable"