Bump GitHub workflows actions

Author: utarwyn

.github/workflows/ci.yml

@@ -15,7 +15,7 @@ jobs:
 
     strategy:
       matrix:
-        node-version: [18.x, 20.x]
+        node-version: [18.x, 24.x]
         java-version: [11]
 
     steps:
@@ -55,7 +55,7 @@ jobs:
         uses: SonarSource/sonarqube-scan-action@master
         if: |
           (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) &&
-          matrix.node-version == '20.x' &&
+          matrix.node-version == '24.x' &&
           github.actor != 'dependabot[bot]'
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -67,15 +67,15 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
-      - name: Use Node.js 20.x
-        uses: actions/setup-node@v4
+      - name: Use Node.js 24.x
+        uses: actions/setup-node@v6
         with:
-          node-version: 20.x
+          node-version: 24.x
 
       - name: Use JDK 11
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: 11

.github/workflows/publish.yml

@@ -9,7 +9,7 @@ permissions:
   packages: write
 
 env:
-  NODE_VERSION: 20.x
+  NODE_VERSION: 24.x
 
 jobs:
   publish-npm:
@@ -18,12 +18,12 @@ jobs:
       id-token: write
     steps:
       - name: Checkout tag "${{ github.ref_name }}"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.ref_name }}
 
       - name: Use Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.NODE_VERSION }}
           registry-url: "https://registry.npmjs.org"
@@ -45,12 +45,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout tag "${{ github.ref_name }}"
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.ref_name }}
 
       - name: Use Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.NODE_VERSION }}
 
@@ -66,7 +66,7 @@ jobs:
         working-directory: eslint-plugin
 
       - name: Configure GitHub Packages registry
-        uses: bduff9/use-npmrc@v2.0.0
+        uses: bduff9/use-npmrc@dbe8c5121963fc22c8825da5cfb3b58aa18e3d1b # v2.0.0
         with:
           working-directory: eslint-plugin
           dot-npmrc: |

.github/workflows/release.yml

@@ -16,7 +16,7 @@ permissions:
   contents: write
 
 env:
-  NODE_VERSION: 20.x
+  NODE_VERSION: 24.x
   JDK_VERSION: 11
 
 jobs:
@@ -26,18 +26,18 @@ jobs:
     if: contains('["dedece35","glalloue","jhertout","jules-delecour-dav","olegoaer","zippy1978","utarwyn","mdubois81"]', github.actor)
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
           token: ${{ secrets.RELEASE_TOKEN }}
 
       - name: Use Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.NODE_VERSION }}
 
       - name: Use JDK ${{ env.JDK_VERSION }}
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v5
         with:
           distribution: temurin
           java-version: ${{ env.JDK_VERSION }}
@@ -62,12 +62,12 @@ jobs:
 
       - name: Extract release notes
         id: extract-release-notes
-        uses: ffurrer2/extract-release-notes@v1
+        uses: ffurrer2/extract-release-notes@202313ec7461b6b9e401996714484690ab1ae105 # v3.0.0
         with:
           prerelease: true
 
       - name: Update changelog
-        uses: suyaser/keep-a-changelog-new-release@1.4.0
+        uses: thomaseizinger/keep-a-changelog-new-release@f62c3c390716df5af712ba5d94f4f4a8efc1306d # v3.1.0
         with:
           version: ${{ steps.package-version.outputs.version }}
           tag: ${{ steps.package-version.outputs.version }}
@@ -85,13 +85,13 @@ jobs:
         working-directory: sonar-plugin
 
       - name: Commit new version
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9.1.4
         with:
           message: Release version ${{ steps.package-version.outputs.version }}
           default_author: github_actions
 
       - name: Create release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
         with:
           name: Release ${{ steps.package-version.outputs.version }}
           tag_name: ${{ steps.package-version.outputs.version }}
@@ -105,13 +105,13 @@ jobs:
     needs: release
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: ${{ github.ref }}
           token: ${{ secrets.RELEASE_TOKEN }}
 
       - name: Use JDK ${{ env.JDK_VERSION }}
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@v6
         with:
           distribution: temurin
           java-version: ${{ env.JDK_VERSION }}
@@ -129,7 +129,7 @@ jobs:
         run: sed -i -E 's/plugin-(.*).jar/plugin-${{ steps.sonar-plugin-version.outputs.version }}.jar/' docker-compose.yml
 
       - name: Commit new version
-        uses: EndBug/add-and-commit@v9
+        uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9.1.4
         with:
           message: Prepare for next development iteration
           default_author: github_actions

docker-compose.yml

@@ -31,7 +31,7 @@ services:
       retries: 5
 
   db:
-    image: postgres:18-alpine
+    image: postgres:17-alpine
     container_name: postgresql_creedengo_javascript
     networks:
       - sonarnet