ci: bump the github-actions-major group across 8 directories with 13 updates

.github/workflows/build-containers.yml

@@ -29,29 +29,29 @@ jobs:
       packages: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ env.REGISTRY }}/${{ github.repository_owner }}/quantecon
           tags: |
             type=raw,value=latest
             type=sha,prefix={{branch}}-
 
       - name: Build and push quantecon container
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: containers/quantecon
           file: containers/quantecon/Dockerfile
@@ -70,29 +70,29 @@ jobs:
       packages: write
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Extract metadata
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ env.REGISTRY }}/${{ github.repository_owner }}/quantecon-build
           tags: |
             type=raw,value=latest
             type=sha,prefix={{branch}}-
 
       - name: Build and push quantecon-build container
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: containers/quantecon-build
           file: containers/quantecon-build/Dockerfile

.github/workflows/check-latex-versions.yml

@@ -9,7 +9,7 @@ jobs:
   check-versions:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Check LaTeX Package Versions
         run: ./scripts/check-latex-versions.sh

.github/workflows/test-container.yml

@@ -17,15 +17,15 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # Test files must match the commit that built the image. For
           # workflow_run events checkout defaults to the default branch, not the
           # triggering commit; fall back to github.sha for workflow_dispatch.
           ref: ${{ github.event.workflow_run.head_sha || github.sha }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -63,15 +63,15 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' || github.event_name == 'workflow_dispatch' }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # Test files must match the commit that built the image. For
           # workflow_run events checkout defaults to the default branch, not the
           # triggering commit; fall back to github.sha for workflow_dispatch.
           ref: ${{ github.event.workflow_run.head_sha || github.sha }}
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -106,7 +106,7 @@ jobs:
           docker images ghcr.io/quantecon/quantecon-build:latest --format "quantecon-build (lean): {{.Size}}"
 
       - name: Upload test artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: test-outputs-lean

.github/workflows/test-containers-lectures.yml

@@ -56,7 +56,7 @@ jobs:
 
     steps:
       - name: Checkout actions repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           # Use the composite actions from the commit that built the container
           # under test. workflow_run checks out the default branch by default;
@@ -65,7 +65,7 @@ jobs:
           path: actions-repo
 
       - name: Checkout lecture repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: ${{ matrix.repo.owner }}/${{ matrix.repo.repo }}
           path: lecture-repo
@@ -105,7 +105,7 @@ jobs:
 
       - name: Upload build artifacts
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: build-${{ matrix.container }}-${{ matrix.repo.repo }}
           path: lecture-repo/_build

build-jupyter-cache/action.yml

@@ -250,14 +250,14 @@ runs:
 
     - name: Save build cache
       if: steps.verify-builds.outputs.all-passed == 'true'
-      uses: actions/cache/save@v4
+      uses: actions/cache/save@v5
       with:
         path: _build
         key: ${{ steps.cache-key.outputs.key }}
 
     - name: Save execution cache
       if: steps.verify-builds.outputs.all-passed == 'true'
-      uses: actions/cache/save@v4
+      uses: actions/cache/save@v5
       with:
         path: _build/.jupyter_cache
         key: jupyter-cache-${{ hashFiles(format('{0}/**/*.md', inputs.source-dir)) }}-${{ github.run_id }}
@@ -271,7 +271,7 @@ runs:
       # 30-day artifact; only upload when a build failed (the cache is not saved
       # then), making the artifact the sole copy for debugging.
       if: inputs.upload-artifact == 'true' && steps.verify-builds.outputs.all-passed != 'true'
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: build-cache-${{ github.run_id }}
         path: _build

build-lectures/action.yml

@@ -167,7 +167,7 @@ runs:
 
     - name: Upload execution reports on failure
       if: inputs.upload-failure-reports == 'true' && failure()
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: ${{ inputs.failure-artifact-name != '' && inputs.failure-artifact-name || format('execution-reports-{0}', inputs.builder) }}
         path: |

preview-cloudflare/action.yml

@@ -113,7 +113,7 @@ runs:
 
     - name: Comment on PR
       if: steps.check-trust.outputs.skip != 'true' && github.event_name == 'pull_request' && steps.deploy.outputs.deploy-url != ''
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       env:
         DEPLOY_URL: ${{ steps.deploy.outputs.deploy-url }}
         CHANGED_FILES: ${{ steps.detect-changes.outputs.changed-files }}

preview-netlify/action.yml

@@ -99,7 +99,7 @@ runs:
 
     - name: Comment on PR
       if: steps.check-trust.outputs.skip != 'true' && github.event_name == 'pull_request' && steps.deploy.outputs.deploy-url != ''
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       env:
         DEPLOY_URL: ${{ steps.deploy.outputs.deploy-url }}
         CHANGED_FILES: ${{ steps.detect-changes.outputs.changed-files }}

publish-gh-pages/action.yml

@@ -66,16 +66,16 @@ runs:
         echo "✅ Preparation complete"
 
     - name: Setup Pages
-      uses: actions/configure-pages@v4
+      uses: actions/configure-pages@v6
 
     - name: Upload Pages artifact
-      uses: actions/upload-pages-artifact@v3
+      uses: actions/upload-pages-artifact@v5
       with:
         path: ${{ inputs.build-dir }}
 
     - name: Deploy to GitHub Pages
       id: deployment
-      uses: actions/deploy-pages@v4
+      uses: actions/deploy-pages@v5
 
     - name: Create release assets
       id: create-assets
@@ -144,7 +144,7 @@ runs:
     - name: Upload release assets
       id: upload-release
       if: inputs.create-release-assets == 'true' && steps.create-assets.outputs.assets-created == 'true'
-      uses: softprops/action-gh-release@v2
+      uses: softprops/action-gh-release@v3
       with:
         files: |
           ${{ steps.create-assets.outputs.archive-name }}

restore-jupyter-cache/action.yml

@@ -105,7 +105,7 @@ runs:
     - name: Restore cache (read-only)
       id: restore-readonly
       if: inputs.save-cache != 'true'
-      uses: actions/cache/restore@v4
+      uses: actions/cache/restore@v5
       with:
         path: ${{ steps.cache-path.outputs.path }}
         key: ${{ steps.cache-key.outputs.key }}
@@ -114,7 +114,7 @@ runs:
     - name: Restore cache (with save at job end)
       id: restore-save
       if: inputs.save-cache == 'true'
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       with:
         path: ${{ steps.cache-path.outputs.path }}
         key: ${{ steps.cache-key.outputs.key }}

setup-environment/action.yml

@@ -107,7 +107,7 @@ runs:
 
     - name: Setup Miniconda (non-container mode)
       if: steps.detect-container.outputs.container-mode == 'false'
-      uses: conda-incubator/setup-miniconda@v3
+      uses: conda-incubator/setup-miniconda@v4
       with:
         # No environment-file here: the env is restored from cache (hit) or
         # created by the "Create/update environment" step below (miss), so a
@@ -121,7 +121,7 @@ runs:
 
     - name: Cache Conda environment (non-container mode)
       if: steps.detect-container.outputs.container-mode == 'false'
-      uses: actions/cache@v4
+      uses: actions/cache@v5
       id: conda-cache
       with:
         path: ${{ env.CONDA }}/envs