ci: bump the all-actions group with 14 updates

.github/workflows/add-to-project.yml

@@ -13,7 +13,7 @@ jobs:
         id: esc-secrets
         uses: pulumi/esc-action@v1
       - name: Add to Docs
-        uses: actions/add-to-project@v0.4.0
+        uses: actions/add-to-project@v1.0.2
         with:
           project-url: https://github.com/orgs/pulumi/projects/79
           github-token: ${{ steps.esc-secrets.outputs.PULUMI_BOT_GHA_MARKETING }}

.github/workflows/automerge-workflow.yml

@@ -23,7 +23,7 @@ jobs:
           UPDATE_LABELS: automation/update
           UPDATE_METHOD: rebase
         name: Automerge
-        uses: pascalgn/automerge-action@v0.16.3
+        uses: pascalgn/automerge-action@v0.16.4
   notify:
     if: failure()
     name: Send slack notification

.github/workflows/bucket-cleanup-testing.yml

@@ -19,14 +19,14 @@ jobs:
       - name: Fetch secrets from ESC
         id: esc-secrets
         uses: pulumi/esc-action@v1
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-node@v6
         with:
           node-version: '24.x'
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v2
+        uses: aws-actions/configure-aws-credentials@v5
         with:
           role-to-assume: arn:aws:iam::571684982431:role/ContinuousDelivery
           role-session-name: docs-deploy

.github/workflows/bucket-cleanup.yml

@@ -18,18 +18,18 @@ jobs:
       - name: Fetch secrets from ESC
         id: esc-secrets
         uses: pulumi/esc-action@v1
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-node@v6
         with:
           node-version: '24.x'
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version: 1.25.x
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v2
+        uses: aws-actions/configure-aws-credentials@v5
         with:
           role-to-assume: arn:aws:iam::388588623842:role/ContinuousDelivery
           role-session-name: docs-cleanup

.github/workflows/build-and-deploy.yml

@@ -25,31 +25,31 @@ jobs:
         id: esc-secrets
         uses: pulumi/esc-action@v1
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-node@v6
         with:
           node-version: '24.x'
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version: 1.25.x
 
-      - uses: peaceiris/actions-hugo@v2
+      - uses: peaceiris/actions-hugo@v3
         with:
           hugo-version: '0.154.5'
           extended: true
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v2
+        uses: aws-actions/configure-aws-credentials@v5
         with:
           role-to-assume: arn:aws:iam::388588623842:role/ContinuousDelivery
           role-session-name: docs-deploy
           role-duration-seconds: 7200
           aws-region: us-west-2
 
       - name: Install Pulumi CLI
-        uses: pulumi/actions@v4
+        uses: pulumi/actions@v6
 
       - name: Build and deploy
         run: make ci_push
@@ -66,13 +66,13 @@ jobs:
           NODE_OPTIONS: "--max_old_space_size=8192"
 
       - name: Archive test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: browser-test-results
           path: cypress/videos
 
       - name: Archive bucket metadata
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: origin-bucket-metadata
           path: origin-bucket-metadata.json

.github/workflows/check-links.yml

@@ -16,13 +16,13 @@ jobs:
       - name: Fetch secrets from ESC
         id: esc-secrets
         uses: pulumi/esc-action@v1
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Install Node
         uses: actions/setup-node@v6
         with:
           node-version: '24.x'
       - name: Install Hugo
-        uses: peaceiris/actions-hugo@v2
+        uses: peaceiris/actions-hugo@v3
         with:
           hugo-version: '0.154.5'
           extended: true

.github/workflows/check-search-urls.yml

@@ -17,14 +17,14 @@ jobs:
       - name: Fetch secrets from ESC
         id: esc-secrets
         uses: pulumi/esc-action@v1
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Install Node
         uses: actions/setup-node@v6
         with:
           node-version: '24.x'
 
-      - uses: peaceiris/actions-hugo@v2
+      - uses: peaceiris/actions-hugo@v3
         with:
           hugo-version: '0.154.5'
           extended: true

.github/workflows/claude.yml

@@ -26,7 +26,7 @@ jobs:
       actions: read # Required for Claude to read CI results on PRs
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 1
 

.github/workflows/customer-managed-workflow-agent-cli.yml

@@ -20,7 +20,7 @@ jobs:
         id: esc-secrets
         uses: pulumi/esc-action@v1
       - name: checkout docs repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
       - name: set the customer-managed-workflow-agent version
         run: |
           echo "CMWA_VERSION=${{ github.event.client_payload.ref }}" >> $GITHUB_ENV
@@ -43,7 +43,7 @@ jobs:
         run: |
           echo "CMWA_VERSION=${{ github.event.client_payload.ref }}" >> $GITHUB_ENV
       - name: checkout docs repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
         with:
           path: docs
       - name: Update latest version

.github/workflows/esc-cli.yml

@@ -20,7 +20,7 @@ jobs:
         id: esc-secrets
         uses: pulumi/esc-action@v1
       - name: checkout docs repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: set the esc version
         run: |
           echo "ESC_VERSION=${{ github.event.client_payload.ref }}" >> $GITHUB_ENV
@@ -43,11 +43,11 @@ jobs:
         run: |
           echo "ESC_VERSION=${{ github.event.client_payload.ref }}" >> $GITHUB_ENV
       - name: checkout docs repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: docs
       - name: checkout esc repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: pulumi/esc
           path: esc
@@ -62,7 +62,7 @@ jobs:
           repo: pulumi/esc
           binaries-location: esc
       - name: Install Hugo
-        uses: peaceiris/actions-hugo@v2
+        uses: peaceiris/actions-hugo@v3
         with:
           hugo-version: '0.154.5'
           extended: true

.github/workflows/label-dependabot.yml

@@ -21,10 +21,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Label and triage Dependabot PR
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             // Get PR details - either from event payload or workflow input

.github/workflows/pr-closed.yml

@@ -19,18 +19,18 @@ jobs:
       - name: Fetch secrets from ESC
         id: esc-secrets
         uses: pulumi/esc-action@v1
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-node@v6
         with:
           node-version: '24.x'
 
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version: 1.25.x
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v2
+        uses: aws-actions/configure-aws-credentials@v5
         with:
           role-to-assume: arn:aws:iam::571684982431:role/ContinuousDelivery
           role-session-name: docs-cleanup

.github/workflows/pull-request.yml

@@ -21,27 +21,27 @@ jobs:
         id: esc-secrets
         uses: pulumi/esc-action@v1
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - uses: actions/setup-node@v6
         with:
           node-version: '24.x'
 
-      - uses: peaceiris/actions-hugo@v2
+      - uses: peaceiris/actions-hugo@v3
         with:
           hugo-version: '0.154.5'
           extended: true
 
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v2
+        uses: aws-actions/configure-aws-credentials@v5
         with:
           role-to-assume: arn:aws:iam::571684982431:role/ContinuousDelivery
           role-session-name: docs-deploy
           role-duration-seconds: 7200
           aws-region: us-west-2
 
       - name: Install Pulumi CLI
-        uses: pulumi/actions@v4
+        uses: pulumi/actions@v6
 
       - name: Build and deploy
         run: make ci_pull_request
@@ -59,13 +59,13 @@ jobs:
           NODE_OPTIONS: "--max_old_space_size=8192"
 
       - name: Archive test results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: browser-test-results
           path: cypress/videos
 
       - name: Archive bucket metadata
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: origin-bucket-metadata
           path: origin-bucket-metadata.json

.github/workflows/pulumi-cli-dev-version.yml

@@ -21,7 +21,7 @@ jobs:
         id: esc-secrets
         uses: pulumi/esc-action@v1
       - name: checkout docs repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
       - name: pull-request
         uses: repo-sync/pull-request@v2
         with:
@@ -38,7 +38,7 @@ jobs:
         id: esc-secrets
         uses: pulumi/esc-action@v1
       - name: checkout docs repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v6
       - name: Update latest version
         run: |
           echo -n "${{ github.event.client_payload.dev_version }}" > ./static/latest-dev-version

.github/workflows/pulumi-cli.yml

@@ -21,7 +21,7 @@ jobs:
         id: esc-secrets
         uses: pulumi/esc-action@v1
       - name: checkout docs repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: set the pulumi version
         run: |
           echo "PULUMI_VERSION=${{ github.event.client_payload.ref }}" >> $GITHUB_ENV
@@ -44,11 +44,11 @@ jobs:
         run: |
           echo "PULUMI_VERSION=${{ github.event.client_payload.ref }}" >> $GITHUB_ENV
       - name: checkout docs repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: docs
       - name: checkout pulumi repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           repository: pulumi/pulumi
           path: pulumi
@@ -62,11 +62,11 @@ jobs:
         with:
           pulumi-version: ${{ env.PULUMI_VERSION }}
       - name: Install go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ${{ matrix.goversion }}
       - name: Install Hugo
-        uses: peaceiris/actions-hugo@v2
+        uses: peaceiris/actions-hugo@v3
         with:
           hugo-version: '0.154.5'
           extended: true
@@ -75,13 +75,13 @@ jobs:
         with:
           node-version: ${{matrix.nodeversion}}
       - name: Install python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v6
         with:
           python-version: ${{matrix.pythonversion}}
       - name: Install Pipenv
         run: pip3 install pipenv
       - name: Install dotnet
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: ${{matrix.dotnetverson}}
       - run: make ensure