chore(deps): update github actions to v6.1.0, v7.0.1, v6.0.1, v7.0.0, 25.0.4+7.0.lts, 24.21.0, 26.04

Author: renovate[bot]

.github/workflows/.deploy.yml

@@ -43,7 +43,7 @@ jobs:
     environment: ${{ inputs.environment }}
     outputs:
       triggered: ${{ steps.deploy.outputs.triggered }}
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - name: Database password
         id: db
@@ -87,7 +87,7 @@ jobs:
     name: Deploy (${{ matrix.name }})
     environment: ${{ inputs.environment }}
     needs: [init]
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     timeout-minutes: 15
     strategy:
       matrix:

.github/workflows/analysis.yml

@@ -21,9 +21,9 @@ jobs:
       contents: read          # Required for checkout
       security-events: write  # Required for uploading SARIF results to Security tab
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
 
       - name: Run Trivy vulnerability scanner in repo mode
         uses: aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25 # v0.36.0
@@ -45,7 +45,7 @@ jobs:
     permissions:
       contents: read  # Required for checkout
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     defaults:
       run:
         working-directory: backend-java
@@ -64,13 +64,13 @@ jobs:
         ports:
           - 5432:5432
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-java@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-java@v6
         with:
           distribution: "temurin"
-          java-version: "23"
+          java-version: "25"
       - name: Cache local Maven repository
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
@@ -85,7 +85,7 @@ jobs:
     permissions:
       contents: read  # Required for checkout
     if: github.event_name != 'pull_request' || !github.event.pull_request.draft
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     defaults:
       run:
         working-directory: backend-py
@@ -104,8 +104,8 @@ jobs:
         ports:
           - 5432:5432
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-python@v6
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: "3.14"
 
@@ -116,7 +116,7 @@ jobs:
         run: echo "$HOME/.local/bin" >> "$GITHUB_PATH"
 
       - name: Cache UV dependencies
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: .venv
           key: uv-${{ hashFiles('**/uv.lock') }}
@@ -131,7 +131,7 @@ jobs:
     name: Analysis Results
     needs: [trivy, java, python]
     if: always()
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: bcgov/actions/workflow-results@4026bfd276b8a5839029106099b13edfb594b2c3 # v0.8.0
         with:

.github/workflows/merge.yml

@@ -19,7 +19,7 @@ permissions: {}
 jobs:
   vars:
     name: Resolve Images
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read
       packages: write
@@ -71,7 +71,7 @@ jobs:
     defaults:
       run:
         working-directory: integration-tests
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     strategy:
       matrix:
         name: [quarkus, fastapi]
@@ -81,10 +81,10 @@ jobs:
           - name: fastapi
             baseUrl: https://${{ github.event.repository.name }}-test-backend-py.apps.silver.devops.gov.bc.ca
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-node@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-node@v7
         with:
-          node-version: "22"
+          node-version: "24"
           cache: npm
           cache-dependency-path: integration-tests/package-lock.json
       - name: Install dependencies
@@ -110,7 +110,7 @@ jobs:
   promote:
     name: Promote Images
     needs: [deploy-prod, vars]
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       packages: write
     strategy:

.github/workflows/pentests.yml

@@ -12,7 +12,7 @@ jobs:
   zap_scan:
     permissions:
       issues: write # Required for ZAP scan to create security issues
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     name: Penetration Tests
     env:
       DOMAIN: apps.silver.devops.gov.bc.ca

.github/workflows/pr-open.yml

@@ -20,7 +20,7 @@ jobs:
       contents: read # Required for repository access
       id-token: write # Required for OIDC token generation
       packages: write # Required for pushing images
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     strategy:
       matrix:
         package: [backend-java, backend-py, migrations-py]
@@ -61,7 +61,7 @@ jobs:
     name: PR Results
     needs: [builds, deploys]
     if: always()
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: bcgov/actions/workflow-results@4026bfd276b8a5839029106099b13edfb594b2c3 # v0.8.0
         with:

.github/workflows/pr-validate.yml

@@ -12,7 +12,7 @@ jobs:
   validate:
     name: Validate PR
     if: (! github.event.pull_request.draft)
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     permissions:
       contents: read          # Required for repository access
       pull-requests: write    # Required for commenting on PRs
@@ -27,7 +27,7 @@ jobs:
     name: Validate Results
     if: always()
     needs: [validate]
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-26.04
     steps:
       - uses: bcgov/actions/workflow-results@4026bfd276b8a5839029106099b13edfb594b2c3 # v0.8.0
         with: