upgrade CI actions to latest versions

.github/workflows/code-quality-main.yaml

@@ -16,18 +16,18 @@ jobs:
       #       check-out repo and set-up python
       #----------------------------------------------
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4.2.1
       - name: Set up Python 3.9
         id: setup-python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5.2.0
         with:
           python-version: "3.9"
 
       #----------------------------------------------
       #  -----  install & configure poetry  -----
       #----------------------------------------------
       - name: Install Poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@v1.4.1
         with:
           virtualenvs-create: true
           virtualenvs-in-project: true
@@ -38,7 +38,7 @@ jobs:
       #----------------------------------------------
       - name: Load cached venv
         id: cached-poetry-dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@v4.1.0
         with:
           path: .venv
           key: venv-${{ runner.os }}-${{ steps.setup-python.outputs.python-version }}-${{ hashFiles('**/poetry.lock') }}
@@ -51,4 +51,4 @@ jobs:
         run: poetry install --no-interaction --no-root
 
       - name: Run pre-commits
-        uses: pre-commit/action@v2.0.3
+        uses: pre-commit/action@v3.0.1

.github/workflows/code-quality-pr.yaml

@@ -19,18 +19,18 @@ jobs:
       #       check-out repo and set-up python
       #----------------------------------------------
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4.2.1
       - name: Set up Python 3.9
         id: setup-python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5.2.0
         with:
           python-version: "3.9"
 
       #----------------------------------------------
       #  -----  install & configure poetry  -----
       #----------------------------------------------
       - name: Install Poetry
-        uses: snok/install-poetry@v1
+        uses: snok/install-poetry@v1.4.1
         with:
           virtualenvs-create: true
           virtualenvs-in-project: true
@@ -41,7 +41,7 @@ jobs:
       #----------------------------------------------
       - name: Load cached venv
         id: cached-poetry-dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@v4.1.0
         with:
           path: .venv
           key: venv-${{ runner.os }}-${{ steps.setup-python.outputs.python-version }}-${{ hashFiles('**/poetry.lock') }}
@@ -68,6 +68,6 @@ jobs:
       # run pre-commit on modified files
       #----------------------------------------------
       - name: Run pre-commits
-        uses: pre-commit/action@v2.0.3
+        uses: pre-commit/action@v3.0.1
         with:
           extra_args: --files ${{ steps.file_changes.outputs.files}}

.github/workflows/labeler.yml

@@ -10,7 +10,7 @@ jobs:
         runs-on: ubuntu-latest
         steps:
             - name: Check out the repository
-              uses: actions/checkout@v3
+              uses: actions/checkout@v4.2.1
 
             - name: Run Labeler
               uses: crazy-max/ghaction-github-labeler@v5

.github/workflows/release.yml

@@ -11,12 +11,12 @@ jobs:
         runs-on: ubuntu-latest
         steps:
           - name: Check out the repository
-            uses: actions/checkout@v2.4.0
+            uses: actions/checkout@v4.2.1
             with:
                 fetch-depth: 2
 
           - name: Set up Python
-            uses: actions/setup-python@v2.3.2
+            uses: actions/setup-python@v5.2.0
             with:
                 python-version: "3.9"
 
@@ -39,7 +39,7 @@ jobs:
           - name: Detect and tag new version
             id: check-version
             if: steps.check-parent-commit.outputs.sha
-            uses: salsify/[email protected].1
+            uses: salsify/[email protected].3
             with:
                 version-command: |
                     bash -o pipefail -c "poetry version | awk '{ print \$2 }'"
@@ -58,14 +58,14 @@ jobs:
           #----------------------------------------------
           - name: Publish package on PyPI
             if: steps.check-version.outputs.tag
-            uses: pypa/gh-action-pypi-publish@v1.5.0
+            uses: pypa/gh-action-pypi-publish@v1.10.3
             with:
                 user: __token__
                 password: ${{ secrets.PYPI_TOKEN }}
 
           - name: Publish package on TestPyPI
             if: "! steps.check-version.outputs.tag"
-            uses: pypa/gh-action-pypi-publish@v1.5.0
+            uses: pypa/gh-action-pypi-publish@v1.10.3
             with:
                 user: __token__
                 password: ${{ secrets.TEST_PYPI_TOKEN }}
@@ -75,7 +75,7 @@ jobs:
           #  -----  create github release notes -----
           #----------------------------------------------
           - name: Publish the release notes
-            uses: release-drafter/release-drafter@v5.18.1
+            uses: release-drafter/release-drafter@v6.0.0
             with:
                 publish: ${{ steps.check-version.outputs.tag != '' }}
                 tag: ${{ steps.check-version.outputs.tag }}

.github/workflows/test.yaml

@@ -24,10 +24,10 @@ jobs:
       #       check-out repo and set-up python
       #----------------------------------------------
       - name: Check out repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4.2.1
       - name: Set up python
         id: setup-python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v5.2.0
         with:
           python-version: ${{ matrix.python-version }}
 
@@ -46,7 +46,7 @@ jobs:
       #----------------------------------------------
       - name: Load cached venv
         id: cached-poetry-dependencies
-        uses: actions/cache@v3
+        uses: actions/cache@v4.1.0
         with:
           path: .venv
           key: venv-${{ runner.os }}-${{ steps.setup-python.outputs.python-version }}-${{ hashFiles('**/poetry.lock') }}