From 7dae0d9869ae7163f85174d2f747045800945a80 Mon Sep 17 00:00:00 2001
From: Hannah Ramadan <76922290+hannahramadan@users.noreply.github.com>
Date: Wed, 7 Aug 2024 10:39:31 -0700
Subject: [PATCH] CI: Node.js 20 GHA updates (#2787)

* GHA updates - Node.js 20

---------

Co-authored-by: James Bunch <fallwith@gmail.com>
Co-authored-by: Kayla Reopelle <87386821+kaylareopelle@users.noreply.github.com>
---
 .github/actions/issue_closer/action.yml     |  2 +-
 .github/actions/simplecov-report/action.yml |  2 +-
 .github/versions.yml                        | 24 +++++++++++--
 .github/workflows/ci.yml                    | 38 ++++++++++-----------
 .github/workflows/ci_cron.yml               | 12 +++----
 .github/workflows/ci_jruby.yml              |  4 +--
 .github/workflows/ci_special.yml            |  2 +-
 .github/workflows/config_docs.yml           |  6 ++--
 .github/workflows/label_community_cards.yml |  2 +-
 .github/workflows/performance_tests.yml     | 12 +++----
 .github/workflows/pr_closed.yml             |  2 +-
 .github/workflows/prerelease.yml            |  4 +--
 .github/workflows/release.yml               |  4 +--
 .github/workflows/release_notes.yml         |  6 ++--
 .github/workflows/release_pr.yml            |  2 +-
 .github/workflows/repolinter.yml            |  4 +--
 .github/workflows/slack_notifications.yml   |  4 +--
 17 files changed, 74 insertions(+), 56 deletions(-)

diff --git a/.github/actions/issue_closer/action.yml b/.github/actions/issue_closer/action.yml
index 4f5b86d1d8..f7298cf244 100644
--- a/.github/actions/issue_closer/action.yml
+++ b/.github/actions/issue_closer/action.yml
@@ -5,5 +5,5 @@ inputs:
     description: 'A GitHub token with PR read and Issue close permissions'
     required: true
 runs:
-  using: 'node16'
+  using: 'node20'
   main: 'dist/index.js'
diff --git a/.github/actions/simplecov-report/action.yml b/.github/actions/simplecov-report/action.yml
index e44b794a7c..c990bb9791 100644
--- a/.github/actions/simplecov-report/action.yml
+++ b/.github/actions/simplecov-report/action.yml
@@ -21,5 +21,5 @@ inputs:
     description: "GitHub token"
     required: true
 runs:
-  using: "node16"
+  using: "node20"
   main: "dist/index.js"
diff --git a/.github/versions.yml b/.github/versions.yml
index fc3733eca5..710d7b62c0 100644
--- a/.github/versions.yml
+++ b/.github/versions.yml
@@ -4,9 +4,9 @@ ruby/setup-ruby:
   :tag: v1.190.0
   :sha: a6e6f86333f0a2523ece813039b8b4be04560854
 actions/checkout:
-  :tag: v4.1.2
-  :sha: 9bb56186c3b09b4f86b1c65136769dd318469633
-nga333/variable-mapper:
+  :tag: v4.1.7
+  :sha: 692973e3d937129bcbf40652eb9f2f61becf3332
+kanga333/variable-mapper:
   :tag: v0.3.0
   :sha: 3681b75f5c6c00162721168fb91ab74925eaebcb
 actions/cache:
@@ -24,3 +24,21 @@ voxmedia/github-action-slack-notify-build:
 Mercymeilya/last-workflow-status:
   :tag: v0.3.3
   :sha: 3418710aefe8556d73b6f173a0564d38bcfd9a43
+actions/upload-artifact:
+  :tag: v4.3.4
+  :sha: 0b2256b8c012f0828dc542b3febcab082c67f72b
+actions/download-artifact:
+  :tag: v4.1.8
+  :sha: fa0a91b85d4f404e444e00e005971372dc801d16
+actions/cache:
+  :tag: v4.0.2
+  :sha: 0c45773b623bea8c8e75f6c82b208c3cf94ea4f9
+actions/github-script:
+  :tag: v7.0.1
+  :sha: 60a0d83039c74a4aee543508d2ffcb1c3799cdea
+adriangl/check-new-commits-action:
+  :tag: v1.0.7
+  :sha: e6471f4fda990ebdb3bf44726371e1ad45ac4d37
+softprops/action-gh-release:
+  :tag: v2.0.8
+  :sha: c062e08bd532815e2082a85e87e3ef29c3e6d191
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 6c61b1d601..6bf548c484 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Configure git
         run: 'git config --global init.defaultBranch main'
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
       - uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # tag v1.190.0
         with:
           ruby-version: '3.3'
@@ -40,7 +40,7 @@ jobs:
     steps:
       - name: Configure git
         run: 'git config --global init.defaultBranch main'
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
         # - curl is needed for Curb
         # - xslt is needed for older Nokogiris, RUBY_VERSION < 2.5
@@ -74,7 +74,7 @@ jobs:
       - if: matrix.ruby-version == '2.4.10'
         name: Cache mysql55
         id: mysql55-cache
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # tag v3.3.1
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # tag v4.0.2
         with:
           path: /usr/local/mysql55
           key: mysql55-install
@@ -103,9 +103,9 @@ jobs:
           CI_FOR_PR: true
 
       - name: Save coverage results
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # tag v3.1.2
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag v4.3.4
         with:
-          name: coverage-report-unit-tests
+          name: coverage-report-unit-tests-${{ matrix.ruby-version }}-${{ env.rails }}
           path: lib/coverage_*/.resultset.json
 
 
@@ -195,7 +195,7 @@ jobs:
     steps:
       - name: Configure git
         run: 'git config --global init.defaultBranch main'
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
         # - curl is needed for Curb
         # - xslt is needed for older Nokogiris, RUBY_VERSION < 2.5
@@ -216,7 +216,7 @@ jobs:
       - if: matrix.ruby-version == '2.4.10'
         name: Cache mysql55
         id: mysql55-cache
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # tag v3.3.1
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # tag v4.0.2
         with:
           path: /usr/local/mysql55
           key: mysql55-install
@@ -267,9 +267,9 @@ jobs:
         uses: ./.github/actions/annotate
 
       - name: Save coverage results
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # tag v3.1.2
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag v4.3.4
         with:
-          name: coverage-report-multiverse
+          name: coverage-report-multiverse-${{ matrix.ruby-version }}-${{ matrix.multiverse }}
           path: lib/coverage_*/.resultset.json
           retention-days: 2
 
@@ -277,10 +277,10 @@ jobs:
         run: rake test:multiverse:gem_manifest
 
       - name: Save gem manifest
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # tag v3.1.2
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag v4.3.4
         with:
-          name: gem_manifest_${{ matrix.ruby-version }}.json
-          path: gem_manifest_${{ matrix.ruby-version }}.json
+          name: gem_manifest_${{ matrix.ruby-version }}_${{ matrix.multiverse }}.json
+          path: gem_manifest_${{ matrix.ruby-version }}_${{ matrix.multiverse }}.json
           retention-days: 2
 
 
@@ -294,7 +294,7 @@ jobs:
     steps:
       - name: Configure git
         run: 'git config --global init.defaultBranch main'
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
       - name: Install Ruby ${{ matrix.ruby-version }}
         uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # tag v1.190.0
@@ -321,9 +321,9 @@ jobs:
         uses: ./.github/actions/annotate
 
       - name: Save coverage results
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # tag v3.1.2
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag v4.3.4
         with:
-          name: coverage-report-infinite-tracing
+          name: coverage-report-infinite-tracing-${{ matrix.ruby-version }}-infinite_tracing
           path: lib/coverage_*/.resultset.json
 
 
@@ -336,19 +336,19 @@ jobs:
     steps:
       - name: Configure git
         run: 'git config --global init.defaultBranch main'
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
       - uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # tag v1.190.0
         with:
           ruby-version: '3.3'
       - run: bundle
       - name: Download all workflow run artifacts
-        uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # tag v3.0.2
+        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # tag v4.1.8
       - name: Collate Coverage Results
         run: bundle exec rake coverage:report
       - name: Upload coverage results
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # tag v3.1.2
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag v4.3.4
         with:
-          name: coverage-report-combined
+          name: coverage-report-combined-${{ matrix.ruby-version }}
           path: lib/coverage_results
           retention-days: 2
       - name: Simplecov Report
diff --git a/.github/workflows/ci_cron.yml b/.github/workflows/ci_cron.yml
index 8a3416ac51..528359dead 100644
--- a/.github/workflows/ci_cron.yml
+++ b/.github/workflows/ci_cron.yml
@@ -15,7 +15,7 @@ jobs:
     steps:
       - name: Configure git
         run: 'git config --global init.defaultBranch main'
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
       - uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # tag v1.190.0
         with:
           ruby-version: '3.3'
@@ -41,7 +41,7 @@ jobs:
     steps:
       - name: Configure git
         run: 'git config --global init.defaultBranch main'
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
         # - curl is needed for Curb
         # - xslt is needed for older Nokogiris, RUBY_VERSION < 2.5
@@ -96,7 +96,7 @@ jobs:
       - if: matrix.ruby-version == '2.4.10' || matrix.ruby-version == '2.5.9' || matrix.ruby-version == '2.6.10'
         name: Cache mysql55
         id: mysql55-cache
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # tag v3.3.1
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # tag v4.0.2
         with:
           path: /usr/local/mysql55
           key: mysql55-install
@@ -207,7 +207,7 @@ jobs:
     steps:
       - name: Configure git
         run: 'git config --global init.defaultBranch main'
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
         # - curl is needed for Curb
         # - xslt is needed for older Nokogiris, RUBY_VERSION < 2.5
@@ -227,7 +227,7 @@ jobs:
       - if: matrix.ruby-version == '2.4.10'
         name: Cache mysql55
         id: mysql55-cache
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # tag v3.3.1
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # tag v4.0.2
         with:
           path: /usr/local/mysql55
           key: mysql55-install
@@ -285,7 +285,7 @@ jobs:
     steps:
       - name: Configure git
         run: 'git config --global init.defaultBranch main'
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
       - name: Install Ruby ${{ matrix.ruby-version }}
         uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # tag v1.190.0
diff --git a/.github/workflows/ci_jruby.yml b/.github/workflows/ci_jruby.yml
index d4f366ff7a..6c759c65a6 100644
--- a/.github/workflows/ci_jruby.yml
+++ b/.github/workflows/ci_jruby.yml
@@ -13,7 +13,7 @@ jobs:
     steps:
       - name: Configure git
         run: 'git config --global init.defaultBranch main'
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
       - name: Install JRuby
         uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # tag v1.190.0
@@ -46,7 +46,7 @@ jobs:
         run: 'git config --global init.defaultBranch main'
 
       - name: Check out the source code
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
       - name: Install JRuby
         uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # tag v1.190.0
diff --git a/.github/workflows/ci_special.yml b/.github/workflows/ci_special.yml
index ae2ede66e8..a13a46caa4 100644
--- a/.github/workflows/ci_special.yml
+++ b/.github/workflows/ci_special.yml
@@ -12,7 +12,7 @@ jobs:
     steps:
       - name: Configure git
         run: 'git config --global init.defaultBranch main'
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
         # - curl is needed for Curb
         # - xslt is needed for older Nokogiris, RUBY_VERSION < 2.5
diff --git a/.github/workflows/config_docs.yml b/.github/workflows/config_docs.yml
index 06d584e508..aa50dd699f 100644
--- a/.github/workflows/config_docs.yml
+++ b/.github/workflows/config_docs.yml
@@ -20,7 +20,7 @@ jobs:
         ruby-version: 3.3
 
     - name: Checkout code
-      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
     - run: bundle
 
@@ -57,10 +57,10 @@ jobs:
     if: failure()
     steps:
       - name: Checkout agent repository
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
       - name: Checkout docs website repository
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
         with:
           repository: ${{ env.DESTINATION_REPO }}
           token: ${{ secrets.NEWRELIC_RUBY_AGENT_BOT_TOKEN }}
diff --git a/.github/workflows/label_community_cards.yml b/.github/workflows/label_community_cards.yml
index 17cbe847ed..f696662b0e 100644
--- a/.github/workflows/label_community_cards.yml
+++ b/.github/workflows/label_community_cards.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Label community issue
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # tag v6.4.1
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # tag v7.0.1
         with:
          script: |
            github.rest.issues.addLabels({
diff --git a/.github/workflows/performance_tests.yml b/.github/workflows/performance_tests.yml
index 48521c9918..c1872b5c45 100644
--- a/.github/workflows/performance_tests.yml
+++ b/.github/workflows/performance_tests.yml
@@ -14,10 +14,10 @@ jobs:
     outputs:
       changed: ${{ steps.branch_change_output.outputs.has-new-commits }}
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
       - name: check branch changes
         id: branch_change_output
-        uses: adriangl/check-new-commits-action@6556947ca20c2047ed733894258186619b84d282 # tag v1.0.6
+        uses: adriangl/check-new-commits-action@e6471f4fda990ebdb3bf44726371e1ad45ac4d37 # tag v1.0.7
         with:
           seconds: 604800
           branch: 'dev'
@@ -30,7 +30,7 @@ jobs:
       run:
         working-directory: ./test/performance
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
         with:
           ref: 'main'
       - uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # tag v1.190.0
@@ -38,13 +38,13 @@ jobs:
           ruby-version: '3.3'
       - run: bundle
       - run: bundle exec script/runner -B
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
       - run: bundle
       - run: bundle exec script/runner -C -M > performance_results.md
       - name: Save performance results
-        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # tag v3.1.2
+        uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # tag v4.3.4
         with:
-          name: performance-test-results
+          name: performance-test-results-${{ matrix.ruby-version }}
           path: ./test/performance/performance_results.md
       - name: Slack results
         uses: adrey/slack-file-upload-action@903be3678c88966c762193f06530c39178b44d68 # tag v1.0.5
diff --git a/.github/workflows/pr_closed.yml b/.github/workflows/pr_closed.yml
index a0072c458d..4a2679aa52 100644
--- a/.github/workflows/pr_closed.yml
+++ b/.github/workflows/pr_closed.yml
@@ -12,7 +12,7 @@ jobs:
     permissions: write-all
     steps:
       - name: Clone the repo
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
       - name: issue_closer Action
         uses: ./.github/actions/issue_closer # no tag - locally sourced
         with:
diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml
index 2661228e67..1d30de8b93 100644
--- a/.github/workflows/prerelease.yml
+++ b/.github/workflows/prerelease.yml
@@ -16,7 +16,7 @@ jobs:
         ruby-version: 3.3
 
     - name: Checkout code
-      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
     - run: bundle
 
@@ -45,7 +45,7 @@ jobs:
         LABEL: prerelease
 
     - name: Create pre release tag
-      uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # tag v0.1.15
+      uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # tag v2.0.8
       with:
         tag_name: ${{ env.prerelease_tag }}
         name: ${{ env.prerelease_tag }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8216e5b3d0..9232fcb6f1 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -12,7 +12,7 @@ jobs:
       contents: write
       repository-projects: write
     steps:
-    - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
       with:
         fetch-depth: 0
 
@@ -42,7 +42,7 @@ jobs:
         echo "VERSION=$(ls newrelic_rpm-*.gem | ruby -pe 'sub(/newrelic_rpm\-(.*).gem/, "\\1")')" >> $GITHUB_ENV
 
     - name: Create github release
-      uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # tag v0.1.15
+      uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # tag v2.0.8
       if: $(git tag -l ${{ env.VERSION }}) == false
       with:
         tag_name: ${{ env.VERSION }}
diff --git a/.github/workflows/release_notes.yml b/.github/workflows/release_notes.yml
index 7ab2a0777b..febddf5cde 100644
--- a/.github/workflows/release_notes.yml
+++ b/.github/workflows/release_notes.yml
@@ -17,7 +17,7 @@ jobs:
         with:
           ruby-version: 3.3
       - name: Checkout code
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
       - name: Generate release notes and environment variables
         run: |
@@ -57,13 +57,13 @@ jobs:
     if: failure()
     steps:
       - name: Checkout agent repository
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
       - name: Get branch name
         run: echo "branch_name=$(ruby -r $PWD/.github/workflows/scripts/generate_release_notes.rb -e GenerateReleaseNotes.new.branch_name)" >> $GITHUB_ENV
 
       - name: Checkout docs website repository
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
         with:
           repository: newrelic/docs-website
           token: ${{ secrets.NEWRELIC_RUBY_AGENT_BOT_TOKEN }}
diff --git a/.github/workflows/release_pr.yml b/.github/workflows/release_pr.yml
index b9e8fdfc67..7aa891d6c3 100644
--- a/.github/workflows/release_pr.yml
+++ b/.github/workflows/release_pr.yml
@@ -19,7 +19,7 @@ jobs:
         ruby-version: 3.3
 
     - name: Checkout code
-      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
 
     - run: bundle
 
diff --git a/.github/workflows/repolinter.yml b/.github/workflows/repolinter.yml
index bdd9b05fb2..df5298833e 100644
--- a/.github/workflows/repolinter.yml
+++ b/.github/workflows/repolinter.yml
@@ -19,14 +19,14 @@ jobs:
     steps:
       - name: Test Default Branch
         id: default-branch
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # tag v6.4.1
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # tag v7.0.1
         with:
           script: |
             const data = await github.rest.repos.get(context.repo)
             return data.data && data.data.default_branch === context.ref.split('/').slice(-1)[0]
       - name: Checkout Self
         if: ${{ steps.default-branch.outputs.result == 'true' }}
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
       - name: Run Repolinter
         if: ${{ steps.default-branch.outputs.result == 'true' }}
         uses: newrelic/repolinter-action@3f4448f855c351e9695b24524a4111c7847b84cb # tag v1.7.0
diff --git a/.github/workflows/slack_notifications.yml b/.github/workflows/slack_notifications.yml
index 7a851284e4..2fa184bf7d 100644
--- a/.github/workflows/slack_notifications.yml
+++ b/.github/workflows/slack_notifications.yml
@@ -11,7 +11,7 @@ jobs:
       - uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # tag v1.190.0
         with:
           ruby-version: 3.3
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
       - run: gem install httparty
       - name: Check for outdated gems
         run: ruby .github/workflows/scripts/slack_notifications/gem_notifier.rb ${{ env.gems }}
@@ -49,7 +49,7 @@ jobs:
       - uses: ruby/setup-ruby@a6e6f86333f0a2523ece813039b8b4be04560854 # tag v1.190.0
         with:
           ruby-version: 3.3
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # tag v4.1.2
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # tag v4.1.7
       - run: gem install httparty
       - run: gem install feedjira
       - name: Check for CVEs