[actions] Update GitHub Actions versions - 2026-04-02 (#24181)

* Initial plan

* chore: Update GitHub Actions versions - 2026-04-02

- docker/login-action v4 → v4.1.0 in release.md
- actions/upload-artifact v4 → v7 in shared/apm.md
- actions/download-artifact v4 → v8.0.1 in shared/apm.md
- github/stale-repos v9.0.6 → v9.0.7 in stale-repo-identifier.md
- super-linter/super-linter v8.5.0 → v8.6.0 in super-linter.md
- Updated actions-lock.json with new SHA pins
- Recompiled workflow lock files

Agent-Logs-Url: https://github.com/github/gh-aw/sessions/ebf63748-376e-4936-904d-1d58547d242b

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>

Author: Copilot

.github/aw/actions-lock.json

@@ -136,7 +136,12 @@
     "docker/login-action@v4": {
       "repo": "docker/login-action",
       "version": "v4",
-      "sha": "b45d80f862d83dbcd57f89517bcf500b2ab88fb2"
+      "sha": "4907a6ddec9925e35a0a9e82d7399ccc52663121"
+    },
+    "docker/login-action@v4.1.0": {
+      "repo": "docker/login-action",
+      "version": "v4.1.0",
+      "sha": "4907a6ddec9925e35a0a9e82d7399ccc52663121"
     },
     "docker/metadata-action@v6": {
       "repo": "docker/metadata-action",
@@ -168,6 +173,11 @@
       "version": "v9.0.6",
       "sha": "7683f9d6900857a9e6dad8a3277a33bcc0b51d44"
     },
+    "github/stale-repos@v9.0.7": {
+      "repo": "github/stale-repos",
+      "version": "v9.0.7",
+      "sha": "25946246f29e8692a397502045e457c4dc96c6e4"
+    },
     "haskell-actions/setup@v2.10.3": {
       "repo": "haskell-actions/setup",
       "version": "v2.10.3",
@@ -192,6 +202,11 @@
       "repo": "super-linter/super-linter",
       "version": "v8.5.0",
       "sha": "61abc07d755095a68f4987d1c2c3d1d64408f1f9"
+    },
+    "super-linter/super-linter@v8.6.0": {
+      "repo": "super-linter/super-linter",
+      "version": "v8.6.0",
+      "sha": "9e863354e3ff62e0727d37183162c4a88873df41"
     }
   }
 }

.github/workflows/release.lock.yml

@@ -330,7 +330,7 @@ jobs:
         uses: docker/setup-buildx-action@v4
 
       - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v4
+        uses: docker/login-action@v4.1.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}

.github/workflows/release.md

@@ -58,15 +58,15 @@ jobs:
           working-directory: /tmp/gh-aw/apm-workspace
       - name: Upload APM bundle artifact
         if: success()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ needs.activation.outputs.artifact_prefix }}apm
           path: ${{ steps.apm_pack.outputs.bundle-path }}
           retention-days: '1'
 
 steps:
   - name: Download APM bundle artifact
-    uses: actions/download-artifact@v4
+    uses: actions/download-artifact@v8.0.1
     with:
       name: ${{ needs.activation.outputs.artifact_prefix }}apm
       path: /tmp/gh-aw/apm-bundle

.github/workflows/shared/apm.md

@@ -71,7 +71,7 @@ env:
 steps:
   - name: Run stale-repos tool
     id: stale-repos
-    uses: github/stale-repos@v9.0.6
+    uses: github/stale-repos@v9.0.7
     env:
       GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       ORGANIZATION: ${{ env.ORGANIZATION }}