Merge pull request #1048 from opengisch/QF-4434-update-ci

Bump all CI deps

.github/workflows/backport.yml

@@ -7,10 +7,10 @@ on:
 
 jobs:
   backport:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     name: Backport
     steps:
       - name: Backport
-        uses: m-kuhn/[email protected].5
+        uses: m-kuhn/[email protected].7
         with:
           github_token: ${{ secrets.NYUKI_TOKEN }}

.github/workflows/build_and_push.yml

@@ -7,10 +7,10 @@ on:
       - "v*.*.*"
 jobs:
   build_and_push:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Prepare
         id: prepare
@@ -26,35 +26,27 @@ jobs:
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v1
-
-      - name: Cache Docker layers
-        uses: actions/cache@v2
-        with:
-          path: /tmp/.buildx-cache
-          key: ${{ runner.os }}-buildx-${{ github.sha }}
-          restore-keys: |
-            ${{ runner.os }}-buildx-
+        uses: docker/setup-buildx-action@v3
 
       - name: Login to dockerhub
         if: github.event_name != 'pull_request'
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
 
       # Application
       - name: Docker Test Application
         id: docker_test_application
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v6
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: ./docker-app
           file: ./docker-app/Dockerfile
 
       - name: Docker Build and Push Application
         id: docker_build_and_push_application
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v6
         with:
           builder: ${{ steps.buildx.outputs.name }}
           target: webserver_runtime
@@ -67,7 +59,7 @@ jobs:
 
       - name: Docker Build and Push Worker
         id: docker_build_and_push_worker
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v6
         with:
           builder: ${{ steps.buildx.outputs.name }}
           target: worker_wrapper_runtime
@@ -81,15 +73,15 @@ jobs:
       # QGIS
       - name: Docker Test QGIS
         id: docker_test_qgis
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v6
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: ./docker-qgis
           file: ./docker-qgis/Dockerfile
 
       - name: Docker Build and Push QGIS
         id: docker_build_and_push_qgis
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v6
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: ./docker-qgis
@@ -102,7 +94,7 @@ jobs:
       # Nginx
       - name: Docker Build and Push nginx
         id: docker_build_and_push_nginx
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v6
         with:
           builder: ${{ steps.buildx.outputs.name }}
           context: ./docker-nginx

.github/workflows/codeql.yml

@@ -12,7 +12,7 @@ on:
 jobs:
   analyze:
     name: Analyze
-    runs-on: 'ubuntu-latest'
+    runs-on: ubuntu-24.04
     permissions:
       actions: read
       contents: read
@@ -25,7 +25,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/stale.yml

@@ -5,9 +5,9 @@ on:
 
 jobs:
   stale:
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
-    - uses: actions/stale@v4
+    - uses: actions/stale@v9
       with:
         repo-token: ${{ secrets.NYUKI_TOKEN }}
         stale-issue-message: |

.github/workflows/test.yml

@@ -15,23 +15,23 @@ jobs:
   lint:
     if: '! github.event.pull_request.draft'
     name: Lint code base
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: recursive
 
       - name: Setup Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5
         with:
-          python-version: '3.10'
+          python-version: '3.12'
       - name: Pre-commit
-        uses: pre-commit/[email protected].0
+        uses: pre-commit/[email protected].1
 
   test:
     name: Run tests
-    runs-on: ubuntu-22.04
+    runs-on: ubuntu-24.04
     strategy:
       fail-fast: false
       matrix:
@@ -44,7 +44,7 @@ jobs:
     continue-on-error: true
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: recursive