Bump all GitHub Actions to latest

- actions/checkout v4 -> v7
- docker/setup-qemu-action v3 -> v4
- docker/setup-buildx-action v3 -> v4
- actions/cache v4 -> v5
- docker/login-action v3 -> v4
- crazy-max/ghaction-import-gpg v6.3.0 -> v7.0.0 (SHA-pinned)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: williamdes

.github/workflows/build.yml

@@ -17,13 +17,13 @@ jobs:
                 version-range: ["5.2", "6.0"]
         steps:
             - name: Checkout repository
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7
             # https://github.com/docker/setup-qemu-action
             - name: Set up QEMU
-              uses: docker/setup-qemu-action@v3
+              uses: docker/setup-qemu-action@v4
             # https://github.com/docker/setup-buildx-action
             - name: Set up Docker Buildx
-              uses: docker/setup-buildx-action@v3
+              uses: docker/setup-buildx-action@v4
             - name: Build action image
               run: PLATFORM="${{ matrix.platform }}" make docker-build
               env:

.github/workflows/cron.yml

@@ -29,14 +29,14 @@ jobs:
               run: echo "snapshot_commit=$(jq -r '.commit' ./snapshot.json)" >> $GITHUB_ENV
             - name: Date to variable
               run: echo "snapshot_date=$(jq -r '.date' ./snapshot.json)" >> $GITHUB_ENV
-            - uses: actions/cache@v4
+            - uses: actions/cache@v5
               id: cache
               with:
                   path: snapshot.json
                   key: snapshot-${{ matrix.version-range }}-${{ env.snapshot_commit }}-${{ env.snapshot_date }}
             - name: Checkout repository
               if: steps.cache.outputs.cache-hit != 'true'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7
               with:
                 fetch-depth: 1
                 ref: 'main'
@@ -46,8 +46,8 @@ jobs:
                 persist-credentials: true
             - name: Import GPG key
               if: steps.cache.outputs.cache-hit != 'true'
-              # v6.3.0 - e89d40939c28e39f97cf32126055eeae86ba74ec
-              uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec
+              # v7.0.0 - 2dc316deee8e90f13e1a351ab510b4d5bc0c82cd
+              uses: crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd
               with:
                   gpg_private_key: ${{ secrets.GPG_PRIVATE_KEY }}
                   passphrase: ${{ secrets.GPG_PASSPHRASE }}

.github/workflows/publish.yml

@@ -16,19 +16,19 @@ jobs:
 
     steps:
         - name: Check out the repository
-          uses: actions/checkout@v4
+          uses: actions/checkout@v7
         - name: Login to DockerHub
-          uses: docker/login-action@v3
+          uses: docker/login-action@v4
           with:
             registry: docker.io
             username: ${{ secrets.DOCKER_REPOSITORY_LOGIN }}
             password: ${{ secrets.DOCKER_REPOSITORY_PASSWORD }}
         # https://github.com/docker/setup-qemu-action
         - name: Set up QEMU
-          uses: docker/setup-qemu-action@v3
+          uses: docker/setup-qemu-action@v4
         # https://github.com/docker/setup-buildx-action
         - name: Set up Docker Buildx
-          uses: docker/setup-buildx-action@v3
+          uses: docker/setup-buildx-action@v4
         - name: Build and push image
           run: make docker-build
           if: startsWith(github.ref, 'refs/tags/5.2/')