build(deps): bump the github-actions group across 1 directory with 3 updates

.github/workflows/build-test.yaml

@@ -15,15 +15,15 @@ jobs:
     name: "Build Binary"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
       - uses: "authzed/actions/go-build@main"
 
   image-build:
     name: "Build Container Image"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/docker-build@main"
 
   unit:
@@ -34,12 +34,12 @@ jobs:
         os: ["ubuntu-latest"] # TODO(miparnisari): add "windows-latest" after fixing the tests
 
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
       - name: "Unit tests with coverage"
         run: "go run mage.go test:runWithCoverage"
       - name: "Upload coverage to Codecov"
-        uses: "codecov/codecov-action@v5.5.1"
+        uses: "codecov/codecov-action@v5.5.2"
         with:
           files: "./coverage.txt"
           verbose: true
@@ -50,7 +50,7 @@ jobs:
     name: "WASM Tests"
     runs-on: "depot-ubuntu-24.04-4"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
         with:
           # NOTE: This needs to match the toolchain version, or else

.github/workflows/docs.yaml

@@ -21,15 +21,15 @@ jobs:
     name: "Generate & Sync Documentation"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
       - uses: "authzed/actions/setup-mage@main"
 
       - name: "Generate Documentation"
         run: "mage gen:docsForPublish"
 
       - name: "Checkout docs repository"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v6"
         with:
           token: "${{ secrets.GITHUB_TOKEN }}"
           repository: "${{ env.DOCS_REPO }}"
@@ -50,7 +50,7 @@ jobs:
       - name: "Create commit & pull request"
         if: "steps.check-changes.outputs.docs_changed == 'true'"
         id: "cpr"
-        uses: "peter-evans/create-pull-request@v7"
+        uses: "peter-evans/create-pull-request@v8"
         with:
           token: "${{ secrets.PAT_TO_PUSH_TO_DOCS }}"
           path: "docs-repo"

.github/workflows/lint.yaml

@@ -15,7 +15,7 @@ jobs:
     name: "Lint Go"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
       - uses: "authzed/actions/gofumpt@main"
       - uses: "authzed/actions/go-mod-tidy@main"
@@ -26,7 +26,7 @@ jobs:
     name: "Lint YAML & Markdown"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/yaml-lint@main"
       - uses: "authzed/actions/markdown-lint@main"
         with:
@@ -44,15 +44,15 @@ jobs:
       matrix:
         language: ["go"]
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
       - uses: "authzed/actions/codeql@main"
 
   trivy-fs:
     name: "Analyze FS with Trivy"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "aquasecurity/trivy-action@master"
         with:
           scan-type: "fs"
@@ -68,7 +68,7 @@ jobs:
     name: "Analyze Release Image with Trivy"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
       # Workaround until goreleaser release supports --single-target
       # makes the build faster by not building everything
@@ -102,5 +102,5 @@ jobs:
     runs-on: "depot-ubuntu-24.04-small"
     if: "github.event_name == 'pull_request' && (github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.action == 'reopened' || github.event.action == 'edited')"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "webiny/action-conventional-commits@v1.3.0"

.github/workflows/release-windows.yml

@@ -11,7 +11,7 @@ jobs:
   release-windows:
     runs-on: "windows-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           fetch-depth: 0
       - uses: "authzed/actions/setup-go@main"

.github/workflows/release.yaml

@@ -9,7 +9,7 @@ jobs:
   github:
     runs-on: "macos-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           fetch-depth: 0
       - name: "Install cross-compilers"
@@ -49,7 +49,7 @@ jobs:
   docker:
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           fetch-depth: 0
       - uses: "authzed/actions/docker-login@main"