Upgrade GitHub Actions workflow dependencies

Author: cv

.github/workflows/ci.yml

@@ -14,7 +14,7 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
         with:
           submodules: recursive
 
@@ -24,8 +24,9 @@ jobs:
           sudo apt-get install -y libncurses-dev
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@v1
         with:
+          toolchain: stable
           components: rustfmt, clippy
 
       - name: Run lint suite
@@ -44,7 +45,7 @@ jobs:
             os: macos-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
         with:
           submodules: recursive
 
@@ -55,7 +56,9 @@ jobs:
           sudo apt-get install -y libncurses-dev
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@v1
+        with:
+          toolchain: stable
 
       - name: Build
         run: cargo build --verbose

.github/workflows/release.yml

@@ -27,7 +27,7 @@ jobs:
             os: macos-latest
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
         with:
           submodules: recursive
 
@@ -38,7 +38,9 @@ jobs:
           sudo apt-get install -y libncurses-dev
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@v1
+        with:
+          toolchain: stable
 
       - name: Set version from tag
         run: |
@@ -63,7 +65,7 @@ jobs:
           cd ../..
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7.0.0
         with:
           name: bash-ast-${{ matrix.target }}
           path: bash-ast-${{ github.ref_name }}-${{ matrix.target }}.tar.gz
@@ -80,7 +82,7 @@ jobs:
           - arch: arm64
             os: ubuntu-24.04-arm
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
         with:
           submodules: recursive
 
@@ -90,7 +92,9 @@ jobs:
           sudo apt-get install -y libncurses-dev rpm
 
       - name: Install Rust
-        uses: dtolnay/rust-toolchain@stable
+        uses: dtolnay/rust-toolchain@v1
+        with:
+          toolchain: stable
 
       - name: Install packaging tools
         run: cargo install cargo-deb cargo-generate-rpm
@@ -117,13 +121,13 @@ jobs:
           ls -la target/generate-rpm/
 
       - name: Upload .deb artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7.0.0
         with:
           name: linux-deb-${{ matrix.arch }}
           path: target/debian/*.deb
 
       - name: Upload .rpm artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7.0.0
         with:
           name: linux-rpm-${{ matrix.arch }}
           path: target/generate-rpm/*.rpm
@@ -141,10 +145,10 @@ jobs:
             bottle_tag: arm64_sequoia
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
 
       - name: Set up Homebrew
-        uses: Homebrew/actions/setup-homebrew@master
+        uses: Homebrew/actions/setup-homebrew@main
 
       - name: Tap and install formula for bottling
         env:
@@ -196,7 +200,7 @@ jobs:
           mv bash-ast-*.bottle.* ${{ github.workspace }}/
 
       - name: Upload bottle artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7.0.0
         with:
           name: bottle-${{ matrix.bottle_tag }}
           path: |
@@ -211,10 +215,10 @@ jobs:
       contents: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6.0.2
 
       - name: Download all artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8.0.1
         with:
           path: artifacts
           merge-multiple: true
@@ -223,7 +227,7 @@ jobs:
         run: ls -la artifacts/
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v2.6.1
         with:
           files: |
             artifacts/*.tar.gz
@@ -242,10 +246,10 @@ jobs:
 
     steps:
       - name: Checkout bash-ast
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6.0.2
 
       - name: Download bottle artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8.0.1
         with:
           pattern: bottle-*
           path: bottles
@@ -326,7 +330,7 @@ jobs:
           mv formula_final.rb Formula/bash-ast.rb
 
       - name: Checkout homebrew-taps
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6.0.2
         with:
           repository: cv/homebrew-taps
           token: ${{ secrets.HOMEBREW_TAP_TOKEN }}