From 9e5081b719fe7d9cf0fb4a42dd129af209f5da78 Mon Sep 17 00:00:00 2001
From: David Grove <dgrove-oss@users.noreply.github.com>
Date: Thu, 8 Feb 2024 09:36:35 -0500
Subject: [PATCH] update versions of GitHub Actions (#395)

---
 .github/dco.yml                   |  2 ++
 .github/workflows/ci.yaml         | 28 ++++++++++++++--------------
 .github/workflows/cli-release.yml |  4 ++--
 3 files changed, 18 insertions(+), 16 deletions(-)
 create mode 100644 .github/dco.yml

diff --git a/.github/dco.yml b/.github/dco.yml
new file mode 100644
index 00000000..37e411e1
--- /dev/null
+++ b/.github/dco.yml
@@ -0,0 +1,2 @@
+require:
+  members: false
\ No newline at end of file
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 4557b49e..e6921bcf 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -36,7 +36,7 @@ jobs:
     steps:
       # Checkout repo
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       # Download pre-reqs
       - name: Install k8s clis
@@ -44,17 +44,17 @@ jobs:
 
       # Configure language versions
       - name: Setup Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           go-version-file: 'core/go.mod'
           cache-dependency-path: 'core/go.sum'
       - name: Setup Java
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: '11'
           distribution: 'temurin'
       - name: Setup JavaScript
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 18.x
 
@@ -94,7 +94,7 @@ jobs:
     steps:
       # Checkout repo
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       # Download pre-reqs
       - name: Install k8s clis
@@ -102,17 +102,17 @@ jobs:
 
       # Configure language versions
       - name: Setup Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           go-version-file: 'core/go.mod'
           cache-dependency-path: 'core/go.sum'
       - name: Setup Java
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: '11'
           distribution: 'temurin'
       - name: Setup JavaScript
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 16.x
 
@@ -138,7 +138,7 @@ jobs:
     steps:
       # Checkout repo
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       # Download pre-reqs
       - name: Install k8s clis
@@ -146,17 +146,17 @@ jobs:
 
       # Configure language versions
       - name: Setup Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           go-version-file: 'core/go.mod'
           cache-dependency-path: 'core/go.sum'
       - name: Setup Java
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4
         with:
           java-version: '11'
           distribution: 'temurin'
       - name: Setup JavaScript
-        uses: actions/setup-node@v3
+        uses: actions/setup-node@v4
         with:
           node-version: 18.x
 
@@ -194,10 +194,10 @@ jobs:
       # Checkout repo
       - name: Checkout repo
         if: ${{ env.PUSH_LATEST  == 'true' || env.PUSH_RELEASE == 'true' }}
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Docker Login
         if: ${{ env.PUSH_LATEST  == 'true' || env.PUSH_RELEASE == 'true' }}
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: quay.io
           username: ${{ secrets.QUAY_USERNAME }}
diff --git a/.github/workflows/cli-release.yml b/.github/workflows/cli-release.yml
index 22722b76..fc90364d 100644
--- a/.github/workflows/cli-release.yml
+++ b/.github/workflows/cli-release.yml
@@ -32,9 +32,9 @@ jobs:
     if: github.repository == 'IBM/kar'
     steps:
       - name: Checkout code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Setup Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with:
           go-version-file: 'core/go.mod'
           cache-dependency-path: 'core/go.sum'