Merge pull request OSGeo#4797 from OSGeo/dependabot/github_actions/all-actions-8bf629ebe6

build(deps): bump the all-actions group with 6 updates

Author: rouault

.github/workflows/auto_tag_stable.yml

@@ -30,7 +30,7 @@ jobs:
 
       - name: Checkout code
         if: steps.check_branch.outputs.run == 'true'
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
 
       - name: Tag
         if: steps.check_branch.outputs.run == 'true'

.github/workflows/clang_linux.yml

@@ -42,10 +42,10 @@ jobs:
     if: "!contains(github.event.head_commit.message, '[ci skip]') && !contains(github.event.head_commit.message, '[skip ci]')"
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
 
       - name: Cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6.1.0
         id: cache
         with:
           path: |

.github/workflows/clang_static_analyzer.yml

@@ -22,7 +22,7 @@ jobs:
     if: "!contains(github.event.head_commit.message, '[ci skip]') && !contains(github.event.head_commit.message, '[skip ci]')"
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
 
       - name: Run
         run: .github/workflows/clang_static_analyzer/start.sh

.github/workflows/code_checks.yml

@@ -22,7 +22,7 @@ jobs:
     if: "!contains(github.event.head_commit.message, '[ci skip]') && !contains(github.event.head_commit.message, '[skip ci]')"
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
 
       - name: Install Requirements
         run: |
@@ -36,7 +36,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
 
       - name: Install Requirements
         run: |
@@ -69,7 +69,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
 
       - name: Detect missing includes
         run: ./scripts/detect_missing_include.sh
@@ -78,7 +78,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
 
       - name: Install Requirements
         run: |
@@ -95,6 +95,6 @@ jobs:
   linting:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v7.0.0
       - uses: actions/setup-python@v6
       - uses: pre-commit/action@v3.0.1

.github/workflows/codeql.yml

@@ -37,11 +37,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v6.0.2
+      uses: actions/checkout@v7.0.0
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v4.36.0
+      uses: github/codeql-action/init@v4.36.2
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -66,7 +66,7 @@ jobs:
     - name: Restore build cache
       if: matrix.language == 'c-cpp'
       id: restore-cache
-      uses: actions/cache/restore@v5
+      uses: actions/cache/restore@v6.1.0
       with:
         path: ${{ github.workspace }}/.ccache
         key: ${{ matrix.id }}-${{ steps.get-arch.outputs.arch }}-${{ github.ref_name }}-${{ github.run_id }}
@@ -93,12 +93,12 @@ jobs:
         ccache -s
     - name: Save build cache
       if: matrix.language == 'c-cpp'
-      uses: actions/cache/save@v5
+      uses: actions/cache/save@v6.1.0
       with:
         path: ${{ github.workspace }}/.ccache
         key: ${{ steps.restore-cache.outputs.cache-primary-key }}
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v4.36.0
+      uses: github/codeql-action/analyze@v4.36.2
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/conda.yml

@@ -30,7 +30,7 @@ jobs:
       GHA_CI_PLATFORM: ${{ matrix.platform }}
 
     steps:
-    - uses: actions/checkout@v6.0.2
+    - uses: actions/checkout@v7.0.0
 
     - uses: conda-incubator/setup-miniconda@v4
       with:

.github/workflows/coverity-scan.yml

@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-22.04
     if: github.repository == 'OSGeo/PROJ'
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v7.0.0
 
       - name: Install Libraries
         run: |

.github/workflows/doc_checks.yml

@@ -24,7 +24,7 @@ jobs:
     container: ghcr.io/osgeo/proj-docs
 
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4.1.7
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v4.1.7
 
     - name: Update sphinx-rtd-theme
       shell: bash -l {0}

.github/workflows/docker.yml

@@ -45,15 +45,15 @@ jobs:
       PUSH_PACKAGES: ${{ github.repository_owner == 'OSGeo' && github.event_name != 'pull_request' && (matrix.container == 'proj' || (matrix.container == 'proj-docs' && github.ref_name == 'master')) }}
       CONTAINER: ${{ matrix.container }}
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v7.0.0
       - name: Lint
         id: lint
         run: |
           echo "are we pushing packages" ${{ env.PUSH_PACKAGES }}
           echo "event_name" ${{ github.event_name }}
           echo "ref" ${{ github.ref }}
       - name: Set up Docker
-        uses: docker/setup-docker-action@v5
+        uses: docker/setup-docker-action@v5.2.0
         with:
           daemon-config: |
             {
@@ -115,7 +115,7 @@ jobs:
           echo "ARCH=$ARCH" >> $GITHUB_OUTPUT
 
       - name: Build docs image
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v7.2.0
         if: matrix.container == 'proj-docs'
         with:
           push: ${{ env.PUSH_PACKAGES == 'true' }}
@@ -152,7 +152,7 @@ jobs:
           echo "EOF" >> $GITHUB_OUTPUT
 
       - name: Build image
-        uses: docker/build-push-action@v7
+        uses: docker/build-push-action@v7.2.0
         id: push
         if: matrix.container == 'proj'
         with:
@@ -174,7 +174,7 @@ jobs:
             org.opencontainers.image.created=${{ steps.prep.outputs.BUILD_DATE }}
       - name: Generate artifact attestation
         if: ${{ env.PUSH_PACKAGES == 'true' && matrix.container  == 'proj' }}
-        uses: actions/attest-build-provenance@v4
+        uses: actions/attest-build-provenance@v4.1.0
         with:
           subject-name: ghcr.io/osgeo/proj
           subject-digest: ${{ steps.push.outputs.digest }}

.github/workflows/emscripten.yml

@@ -24,7 +24,7 @@ jobs:
     if: "!contains(github.event.head_commit.message, '[ci skip]') && !contains(github.event.head_commit.message, '[skip ci]')"
     steps:
       - name: Checkout
-        uses: actions/checkout@v6.0.2
+        uses: actions/checkout@v7.0.0
 
       - name: Build docker
         run: docker build -t proj-emscripten-builder scripts/ci/emscripten/