From 3ecbcbcbb1795b5c5e2e5107fc2d7f7834c3fbfc Mon Sep 17 00:00:00 2001
From: Salman Muin Kayser Chishti <13schishti@gmail.com>
Date: Fri, 13 Mar 2026 06:06:17 +0000
Subject: [PATCH] Upgrade GitHub Actions to latest versions

Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>
---
 .../action.yaml                               |  2 +-
 .github/workflows/deployment.yaml             | 20 +++++++++----------
 .github/workflows/presubmit.yaml              |  2 +-
 3 files changed, 12 insertions(+), 12 deletions(-)

diff --git a/.github/actions/deploy-cuttlefish-cvdremote-debian-package/action.yaml b/.github/actions/deploy-cuttlefish-cvdremote-debian-package/action.yaml
index 0917d3bf..bf2dc384 100644
--- a/.github/actions/deploy-cuttlefish-cvdremote-debian-package/action.yaml
+++ b/.github/actions/deploy-cuttlefish-cvdremote-debian-package/action.yaml
@@ -8,7 +8,7 @@ runs:
   using: "composite"
   steps:
   - name: 'Set up Cloud SDK'
-    uses: 'google-github-actions/setup-gcloud@v3.0.0'
+    uses: 'google-github-actions/setup-gcloud@v3.0.1'
     with:
       version: '>= 363.0.0'
   - name: Deploy deb package into Artifact Registry
diff --git a/.github/workflows/deployment.yaml b/.github/workflows/deployment.yaml
index 3d98aef9..5ded90c6 100644
--- a/.github/workflows/deployment.yaml
+++ b/.github/workflows/deployment.yaml
@@ -66,7 +66,7 @@ jobs:
     - name: Get exact filename
       run: echo "path=$(find . -name cuttlefish-cvdremote_*.deb)" >> $GITHUB_ENV
     - name: Authentication on GCP project android-cuttlefish-artifacts
-      uses: 'google-github-actions/auth@v2'
+      uses: 'google-github-actions/auth@v3'
       with:
         credentials_json: '${{ secrets.artifact-registry-uploader-json-creds }}'
     - name: Deploy debian package cuttlefish-cvdremote
@@ -91,7 +91,7 @@ jobs:
     - name: Get exact filename
       run: echo "path=$(find . -name cuttlefish-cvdremote_*.deb)" >> $GITHUB_ENV
     - name: Authentication on GCP project android-cuttlefish-artifacts
-      uses: 'google-github-actions/auth@v2'
+      uses: 'google-github-actions/auth@v3'
       with:
         credentials_json: '${{ secrets.artifact-registry-uploader-json-creds }}'
     - name: Deploy debian package cuttlefish-cvdremote
@@ -110,11 +110,11 @@ jobs:
     - name: Build docker image
       run: docker build -t cuttlefish-cloud-orchestrator .
     - name: Authentication on GCP project android-cuttlefish-artifacts
-      uses: 'google-github-actions/auth@v2'
+      uses: 'google-github-actions/auth@v3'
       with:
         credentials_json: '${{ secrets.artifact-registry-uploader-json-creds }}'
     - name: Login to Artifact Registry
-      uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # aka v3.5.0
+      uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2  # v4.0.0
       with:
         registry: us-docker.pkg.dev
         username: _json_key
@@ -135,11 +135,11 @@ jobs:
     - name: Build docker image
       run: docker build -t cuttlefish-cloud-orchestrator .
     - name: Authentication on GCP project android-cuttlefish-artifacts
-      uses: 'google-github-actions/auth@v2'
+      uses: 'google-github-actions/auth@v3'
       with:
         credentials_json: '${{ secrets.artifact-registry-uploader-json-creds }}'
     - name: Login to Artifact Registry
-      uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # aka v3.5.0
+      uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2  # v4.0.0
       with:
         registry: us-docker.pkg.dev
         username: _json_key
@@ -158,11 +158,11 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@a81bbbf8298c0fa03ea29cdc473d45769f953675 # aka v2
     - name: Authentication on GCP project android-cuttlefish-artifacts
-      uses: 'google-github-actions/auth@v2'
+      uses: 'google-github-actions/auth@v3'
       with:
         credentials_json: '${{ secrets.artifact-registry-uploader-json-creds }}'
     - name: Login to Artifact Registry
-      uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # aka v3.5.0
+      uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2  # v4.0.0
       with:
         registry: us-docker.pkg.dev
         username: _json_key
@@ -186,11 +186,11 @@ jobs:
     - name: Checkout repository
       uses: actions/checkout@a81bbbf8298c0fa03ea29cdc473d45769f953675 # aka v2
     - name: Authentication on GCP project android-cuttlefish-artifacts
-      uses: 'google-github-actions/auth@v2'
+      uses: 'google-github-actions/auth@v3'
       with:
         credentials_json: '${{ secrets.artifact-registry-uploader-json-creds }}'
     - name: 'Set up Cloud SDK'
-      uses: 'google-github-actions/setup-gcloud@v3.0.0'
+      uses: 'google-github-actions/setup-gcloud@v3.0.1'
       with:
         version: '>= 363.0.0'
     - name: Deploy conf.toml
diff --git a/.github/workflows/presubmit.yaml b/.github/workflows/presubmit.yaml
index 34fed9e5..72c6ae79 100644
--- a/.github/workflows/presubmit.yaml
+++ b/.github/workflows/presubmit.yaml
@@ -26,7 +26,7 @@ jobs:
     - name: Vet
       run: go vet ./...
     - name: Staticcheck
-      uses: dominikh/staticcheck-action@v1.3.1
+      uses: dominikh/staticcheck-action@v1.4.1
       with:
         version: "latest"
         install-go: false