From 6d42f57be154d0f0447fee6cdaa73e0e63b3c63e Mon Sep 17 00:00:00 2001
From: fabasoad <fabasoad@gmail.com>
Date: Mon, 26 Jan 2026 21:03:26 +0900
Subject: [PATCH] ci: bump GitHub Actions to the latest version

---
 .github/workflows/cla.yml                  | 4 ++--
 .github/workflows/frogbot-scan-and-fix.yml | 6 +++---
 .github/workflows/frogbot-scan-pr.yml      | 6 +++---
 .github/workflows/test.yml                 | 8 ++++----
 .tool-versions                             | 1 +
 5 files changed, 13 insertions(+), 12 deletions(-)
 create mode 100644 .tool-versions

diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index 58552d4..7d58f9c 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -15,11 +15,11 @@ jobs:
         with:
           text: ${{ github.event.comment.body }}
           regex: '\s*(I have read the CLA Document and I hereby sign the CLA)|(recheckcla)\s*'
-      
+
       - name: "CLA Assistant"
         if: ${{ steps.sign-or-recheck.outputs.match != '' || github.event_name == 'pull_request_target' }}
         # Alpha Release
-        uses: cla-assistant/github-action@v2.6.0
+        uses: cla-assistant/github-action@v2.6.1
         env:
           # Generated and maintained by github
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/frogbot-scan-and-fix.yml b/.github/workflows/frogbot-scan-and-fix.yml
index 66516b2..075f647 100644
--- a/.github/workflows/frogbot-scan-and-fix.yml
+++ b/.github/workflows/frogbot-scan-and-fix.yml
@@ -15,13 +15,13 @@ jobs:
   create-fix-pull-requests:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
 
       # Install prerequisites
       - name: Setup NodeJS
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
-          node-version: "16.x"
+          node-version-file: ".tool-versions"
 
       - uses: jfrog/frogbot@v2
         env:
diff --git a/.github/workflows/frogbot-scan-pr.yml b/.github/workflows/frogbot-scan-pr.yml
index 781c1a1..acc6ea3 100644
--- a/.github/workflows/frogbot-scan-pr.yml
+++ b/.github/workflows/frogbot-scan-pr.yml
@@ -12,15 +12,15 @@ jobs:
     # "frogbot" GitHub environment can approve the pull request to be scanned.
     environment: frogbot
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
 
       # Install prerequisites
       - name: Setup NodeJS
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
-          node-version: "16.x"
+          node-version-file: ".tool-versions"
 
       - uses: jfrog/frogbot@v2
         env:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 9ef6351..435fbab 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -19,13 +19,13 @@ jobs:
 
     steps:
       # Prerequisites
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v6
         with:
           ref: ${{ github.event.pull_request.head.sha }}
       - name: Setup NodeJS
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v6
         with:
-          node-version: "16"
+          node-version-file: ".tool-versions"
 
       # Clean install project
       - name: Clean install
@@ -44,5 +44,5 @@ jobs:
 
       # Send tests coverage to Codecov
       - name: Send code coverage
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v5
         if: runner.os == 'Linux'
diff --git a/.tool-versions b/.tool-versions
new file mode 100644
index 0000000..5c759bc
--- /dev/null
+++ b/.tool-versions
@@ -0,0 +1 @@
+nodejs 25.4.0