chore(ci): Update GitHub Actions and runtime versions

- Upgrade GitHub Actions to latest versions:
  - actions/checkout: v4 -> v6
  - actions/setup-python: v4 -> v6
  - actions/setup-node: v5 -> v6
  - actions/upload-artifact: v4 -> v6
  - astral-sh/setup-uv: v5/v6 -> v7
  - github/codeql-action: v3 -> v4
- Update runtime versions across all workflows:
  - Python: 3.12 -> 3.13
  - Node.js: 22.x -> 24.x
- Apply changes consistently across GitHub and Gitea workflows

Author: adrianjhunter

.gitea/actions/configure/action.yaml

@@ -16,13 +16,13 @@ runs:
       run: pip install cfn-lint cfn-lint-serverless
 
     - name: Setup NodeJS
-      uses: actions/setup-node@v5
+      uses: actions/setup-node@v6
       with:
         node-version: ${{ env.NODE_VERSION }}
     - run: 'echo "NodeJS version: $(node --version)"'
 
     - run: echo "**** Setup uv ****"
-    - uses: astral-sh/setup-uv@v6
+    - uses: astral-sh/setup-uv@v7
     - run: uv --version
 
     - run: echo "**** Install application dependencies ****"

.gitea/workflows/pipeline.yaml

@@ -112,8 +112,8 @@ jobs:
     runs-on: ubuntu-latest
     env:
       SERVICE_FOLDER: "unicorn_approvals"
-      PYTHON_VERSION: "3.12"
-      NODE_VERSION: "22.x"
+      PYTHON_VERSION: "3.13"
+      NODE_VERSION: "24.x"
     steps:
       - uses: actions/checkout@v5
 
@@ -193,8 +193,8 @@ jobs:
     runs-on: ubuntu-latest
     env:
       SERVICE_FOLDER: "unicorn_contracts"
-      PYTHON_VERSION: "3.12"
-      NODE_VERSION: "22.x"
+      PYTHON_VERSION: "3.13"
+      NODE_VERSION: "24.x"
     steps:
       - uses: actions/checkout@v5
 
@@ -297,8 +297,8 @@ jobs:
     runs-on: ubuntu-latest
     env:
       SERVICE_FOLDER: "unicorn_approvals"
-      PYTHON_VERSION: "3.12"
-      NODE_VERSION: "22.x"
+      PYTHON_VERSION: "3.13"
+      NODE_VERSION: "24.x"
     steps:
       - uses: actions/checkout@v5
 
@@ -445,8 +445,8 @@ jobs:
     runs-on: ubuntu-latest
     env:
       SERVICE_FOLDER: "unicorn_web"
-      PYTHON_VERSION: "3.12"
-      NODE_VERSION: "22.x"
+      PYTHON_VERSION: "3.13"
+      NODE_VERSION: "24.x"
     steps:
       - uses: actions/checkout@v5
 

.github/workflows/build.yml

@@ -30,15 +30,15 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up Python 3.13
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v6
         with:
           python-version: 3.13
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@v7
         with:
           version: 0.7.8
 

.github/workflows/codeql-analysis.yml

@@ -25,11 +25,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: ${{ matrix.language }}
 
@@ -49,4 +49,4 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4

.github/workflows/label_pr_on_title.yml

@@ -22,7 +22,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: "Label PR based on title"
         uses: actions/github-script@v7
         env:

.github/workflows/on_label_added.yml

@@ -23,7 +23,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       # Maintenance: Persist state per PR as an artifact to avoid spam on label add
       - name: "Suggest split large Pull Request"
         uses: actions/github-script@v7

.github/workflows/on_merged_pr.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     if: needs.get_pr_details.outputs.prIsMerged == 'true'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: "Label PR related issue for release"
         uses: actions/github-script@v7
         env:

.github/workflows/on_opened_pr.yml

@@ -19,7 +19,7 @@ jobs:
     needs: get_pr_details
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: "Ensure related issue is present"
         uses: actions/github-script@v7
         env:
@@ -36,7 +36,7 @@ jobs:
     needs: get_pr_details
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: "Ensure acknowledgement section is present"
         uses: actions/github-script@v7
         env:

.github/workflows/record_pr.yml

@@ -9,14 +9,14 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: "Extract PR details"
         uses: actions/github-script@v7
         with:
           script: |
             const script = require('.github/scripts/save_pr_details.js')
             await script({github, context, core})
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@v6
         with:
           name: pr
           path: pr.txt

.github/workflows/reusable_unit_tests.yml

@@ -12,13 +12,13 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v6
         with: { python-version: 3.13 }
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v5
+        uses: astral-sh/setup-uv@v7
         with:
           version: 0.7.8