chore: update CI workflow actions to current majors

.github/workflows/change-log-check.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
     - name: Checkout code
-      uses: actions/checkout@v4
+      uses: actions/checkout@v7
       with:
         fetch-depth: 0
 

.github/workflows/ci-nightly-performance-testing.yaml

@@ -19,10 +19,10 @@ jobs:
     env:
       endpoint_to_test: "http://localhost:9545"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: "INSTALL:NODEJS"
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v7
         with:
           node-version: 20
 
@@ -102,7 +102,7 @@ jobs:
           artillery report report.json --output artillery_report.html
 
       - name: "UPLOAD:REPORT"
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: artillery-report

.github/workflows/ci.yml

@@ -24,15 +24,15 @@ jobs:
     runs-on: ubuntu-22.04
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v7
         with:
           go-version: '1.23'
 
       - name: Test
-        uses: nick-fields/retry@v3
+        uses: nick-fields/retry@v4
         with:
           timeout_minutes: 20
           max_attempts: 2
@@ -43,9 +43,9 @@ jobs:
             make test-coverage
 
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v4.0.1
+        uses: codecov/codecov-action@v7.1.1
         with:
-          file: coverage.out
+          files: coverage.out
           token: ${{ secrets.CODECOV_TOKEN }}
           slug: zeta-chain/node
 
@@ -61,21 +61,21 @@ jobs:
           ./zetacored version
 
       - name: Upload zetacored
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: zetacored
           path: ~/go/bin/zetacored
           retention-days: 30
 
       - name: Upload zetaclientd
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: zetaclientd
           path: ~/go/bin/zetaclientd
           retention-days: 30
 
       - name: Upload zetae2e
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: zetae2e
           path: ~/go/bin/zetae2e
@@ -92,9 +92,9 @@ jobs:
     # it will still be check in the merge queue in this case
     if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'zeta-chain/node'
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v7
         with:
           go-version: '1.23'
       - name: go get node

.github/workflows/e2e.yml

@@ -39,27 +39,27 @@ jobs:
     outputs:
       image: ${{ steps.build.outputs.metadata && fromJson(steps.build.outputs.metadata)['image.name'] || '' }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       # configure docker to use the containerd snapshotter
       # so that we can use the buildkit cache
       - uses: depot/use-containerd-snapshotter-action@v1
 
       - name: Login to Docker Hub registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_READ_ONLY }}
 
       - name: Login to github docker registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Restore go cache
-        uses: actions/cache@v4
+        uses: actions/cache@v6
         id: restore-go-cache
         with:
           path: |
@@ -86,7 +86,7 @@ jobs:
       # build zetanode with cache options
       - name: Build zetanode for cache
         id: build
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         env:
           CACHE_FROM_CONFIG: "type=registry,ref=ghcr.io/${{ github.repository }}:buildcache"
           CACHE_TO_CONFIG: "type=registry,ref=ghcr.io/${{ github.repository }}:buildcache,mode=max"
@@ -135,7 +135,7 @@ jobs:
     steps:
       # use api rather than event context to avoid race conditions (label added after push)
       - id: matrix-conditionals
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const getPrLabels = async (pull_number) => {
@@ -354,7 +354,7 @@ jobs:
     if: ${{ !cancelled() }}
     steps:
       - name: Send slack message with results
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         if: ${{ github.event_name == 'schedule' || (github.event_name == 'push' && needs.e2e.result == 'failure') }}
         env:
           SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_CI_ALERTS }}
@@ -396,7 +396,7 @@ jobs:
             });
 
       - name: Add MERGE_FAILED label if merge queue failed
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         if: ${{ github.event_name == 'merge_group' && needs.e2e.result == 'failure' }}
         with:
           script: |

.github/workflows/generate-files.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - uses: bufbuild/buf-setup-action@v1
         with:

.github/workflows/reusable-e2e.yml

@@ -38,17 +38,17 @@ jobs:
     env:
       ZETANODE_IMAGE: ${{ inputs.zetanode-image }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Login to Docker Hub registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'zeta-chain/node'
         with:
           username: ${{ secrets.DOCKER_HUB_USERNAME }}
           password: ${{ secrets.DOCKER_HUB_READ_ONLY }}
 
       - name: Login to github docker registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -81,7 +81,7 @@ jobs:
 
       - name: Upload Logs On Failure
         if: failure()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ inputs.make-target }}-docker-logs
           path: /tmp/logs.txt

.github/workflows/sast-linters.yml

@@ -21,7 +21,7 @@ jobs:
       GOTOOLCHAIN: auto
     steps:
       - name: Checkout Source
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -37,17 +37,17 @@ jobs:
       GO111MODULE: on
     steps:
       - name: Checkout Source
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Set up Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v7
         with:
           go-version: '1.23'
 
       - name: Run golangci-lint
-        uses: golangci/golangci-lint-action@v8
+        uses: golangci/golangci-lint-action@v9
         with:
           version: v2.1.6
           skip-cache: true
@@ -59,7 +59,7 @@ jobs:
       GO111MODULE: on
     steps:
       - name: Checkout Source
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -105,7 +105,7 @@ jobs:
 
 
       - name: Report nosec uses
-        uses: mshick/add-pr-comment@v2
+        uses: mshick/add-pr-comment@v3
         if: env.nosec_detected == 1
         with:
           message: |
@@ -120,7 +120,7 @@ jobs:
             Pay extra attention to the way `#nosec` is being used in the files listed above. 
 
       - name: Add Label
-        uses: actions/github-script@v6
+        uses: actions/github-script@v9
         if: env.nosec_detected == 1
         with:
           script: |

.github/workflows/semgrep.yml

@@ -21,9 +21,9 @@ jobs:
       github.actor != 'dependabot[bot]' &&
       (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == 'zeta-chain/node')
     steps:
-      - uses: actions/checkout@v4    
+      - uses: actions/checkout@v7    
       - name: Checkout semgrep-utilities repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           repository: zeta-chain/semgrep-utilities
           path: semgrep-utilities
@@ -37,6 +37,6 @@ jobs:
       - run: python semgrep-utilities/utilities/github-sarif-helper/src/semgrep-json-to-sarif.py --json semgrep-findings.json --sarif semgrep-github.sarif
 
       - name: Upload SARIF file for GitHub Advanced Security Dashboard
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: semgrep-github.sarif

.github/workflows/zetachain-sec-checks.yml

@@ -20,12 +20,12 @@ jobs:
         language: [ 'go' ]
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
           packs: zeta-chain/protocol-security-codeql  
       - name: Analyze
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4