Updated all GitHub Actions to latest version to update to NodeJS 20 (#690)

.github/workflows/AKSC_Deploy.yml

@@ -74,7 +74,7 @@ jobs:
       AGNAME: ${{ steps.deployAks.outputs.AGNAME }}
     steps:
       # Login to Azure
-    - uses: azure/login@v1.4.6
+    - uses: azure/login@v2
       name: Initial Login to Azure to Deploy
       with:
         client-id: ${{ secrets.AZURE_CLIENT_ID }}
@@ -139,7 +139,7 @@ jobs:
         echo "AGNAME=$appGatewayName" >> $GITHUB_OUTPUT
 
       # Re-Login to Azure if we're using the AKS RUN COMMAND
-    - uses: azure/login@v1.4.6
+    - uses: azure/login@v2
       name: Initial Login to Azure to Deploy
       if: inputs.postScriptParams && inputs.postScriptInvokeCommand == true
       with:

.github/workflows/AksTroubleshooting.yml

@@ -85,7 +85,7 @@ jobs:
         run: az extension add -n log-analytics -y
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           creds:  ${{ secrets.AZURE_CREDENTIALS }}
           enable-AzPSSession: true
@@ -138,7 +138,7 @@ jobs:
     if: always() && inputs.AGNAME != ''
     steps:
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
           enable-AzPSSession: true
@@ -233,7 +233,7 @@ jobs:
 
       - name: Store any generated debug json files as artifacts
         if: always()
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.3.1
         with:
           name: Troubleshooting-AGIC
           path: debug*.*
@@ -252,7 +252,7 @@ jobs:
           echo "LA workspace guid is ${{ inputs.LAWGUID }}"
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
           enable-AzPSSession: true
@@ -275,7 +275,7 @@ jobs:
 
       - name: Check Run Command
         if: inputs.USERUNCMD == true
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         env:
           AZCLIVERSION: latest
         with:

.github/workflows/AppDeploy_AzureVote.yml

@@ -70,7 +70,7 @@ jobs:
       AKSNAME: "${{ inputs.AKSNAME}}"
       RG: "${{ inputs.RG }}"
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Job parameter inspection
         run: |
@@ -79,7 +79,7 @@ jobs:
           echo "AKS name is ${{ inputs.AKSNAME }}"
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
           enable-AzPSSession: false
@@ -271,7 +271,7 @@ jobs:
 
       - name: Store any generated debug files as artifacts
         if: always()
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.3.1
         with:
           name: DebugFiles
           path: debug*.json

.github/workflows/AppDeploy_JavaApp.yml

@@ -62,7 +62,7 @@ jobs:
     runs-on: ubuntu-latest
     concurrency: "Ag-${{ inputs.AGNAME}}" #AppGateway doesn't like concurrent updates
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Job parameter inspection
         run: |
@@ -72,7 +72,7 @@ jobs:
           echo "CertManager version is ${{ inputs.CERTMANAGERVERSION }}"
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
           enable-AzPSSession: false

.github/workflows/ByoVnetCI.yml

@@ -95,7 +95,7 @@ jobs:
     needs: [Validation]
     if:  github.event_name != 'pull_request' || github.event.inputs.doWellArchitected == 'true' ||  contains( github.event.pull_request.labels.*.name, 'test-deploy-byoconfig')
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       # PSRule does this cool thing where it traverse the parameter file through to the arm template
       # PSRule performs IaC recommendations of the template.
@@ -148,7 +148,7 @@ jobs:
       PARAMOVERRIDES: ${{ steps.imperitiveparams.outputs.PARAMOVERRIDES}} #This won't work if the string includes any SECRETS!!!
       PARAMOVERRIDESNOSECRETS: ${{ steps.imperitiveparams.outputs.PARAMOVERRIDESNOSECRETS}}
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Job parameter check
         run: |
@@ -212,7 +212,7 @@ jobs:
             echo "NEWRESNAME=$NEWRESNAME" >> $GITHUB_OUTPUT
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
@@ -232,7 +232,7 @@ jobs:
         if: github.event.inputs.doVerifySteps == 'true'
         env:
           RG: ${{ steps.params.outputs.RESOURCEGROUP }}
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         with:
           azcliversion: ${{ env.AZCLIVERSION }}
           inlineScript: |
@@ -288,7 +288,7 @@ jobs:
           }
 
       - name: Create Parameter file imperative override string
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         id: imperitiveparams
         env:
           RG: ${{ steps.params.outputs.RESOURCEGROUP }}
@@ -304,7 +304,7 @@ jobs:
             echo "PARAMOVERRIDESNOSECRETS=$PARAMOVERRIDESNOSECRETS" >> $GITHUB_OUTPUT
 
       - name: Validate Infrastructure deployment
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         env:
           RG: ${{ steps.params.outputs.RESOURCEGROUP }}
         with:
@@ -319,7 +319,7 @@ jobs:
             az deployment group validate -f bicep/main.bicep -g $RG -p ${{ env.ParamFilePath }} -p $PARAMS --verbose
 
       - name: What If (GA edge Az cli version) (has issues)
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         id: edgeWhatIf
         env:
           RG: ${{ steps.params.outputs.RESOURCEGROUP }}
@@ -346,7 +346,7 @@ jobs:
             echo "edgeSuccess=true" >> $GITHUB_OUTPUT
 
       - name: What If (No Secrets param string, used for Cost Estimate)
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         env:
           RG: ${{ steps.params.outputs.RESOURCEGROUP }}
         continue-on-error: true
@@ -367,7 +367,7 @@ jobs:
             cat $WHATIFPATH
 
       - name: What If (workaround task)
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         continue-on-error: true #Setting to true due to bug in the AzureCLI https://github.com/Azure/azure-cli/issues/19850
         if: steps.edgeWhatIf.outputs.edgeSuccess != 'true'
         env:
@@ -481,7 +481,7 @@ jobs:
 
     if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' || github.ref == 'refs/heads/develop' || contains( github.event.pull_request.labels.*.name, 'test-deploy-byoconfig')
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Job parameter check
         if: github.event.inputs.doDebugSteps == 'true'
@@ -505,7 +505,7 @@ jobs:
           }
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
@@ -516,7 +516,7 @@ jobs:
 
       - name: Deploy Infrastructure
         id: deployAks
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         with:
           azcliversion: ${{ env.AZCLIVERSION }}
           inlineScript: |
@@ -550,7 +550,7 @@ jobs:
 
 
       - name: Enable AGIC Addon
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         if: ${{ needs.Deploy.outputs.AGNAME}} != ''
         with:
           azcliversion: ${{ env.AZCLIVERSION }}
@@ -728,7 +728,7 @@ jobs:
     env:
       RG: ${{ needs.Validation.outputs.RESOURCEGROUP }}
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Param check
         if: github.event.inputs.doDebugSteps == 'true'
@@ -740,7 +740,7 @@ jobs:
           echo "AKS name is ${{ needs.Deploy.outputs.AKSNAME }}"
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/ByoVnetPrivateCI.yml

@@ -91,7 +91,7 @@ jobs:
     environment: ${{ github.event.inputs.environment }}
     if:  github.event_name == 'pull_request' || github.event.inputs.doWellArchitected == 'true'
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       # PSRule does this cool thing where it traverse the parameter file through to the arm template
       # PSRule performs IaC recommendations of the template.
@@ -160,7 +160,7 @@ jobs:
       RESNAME: ${{ steps.params.outputs.NEWRESNAME}}
 
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Job parameter check
         run: |
@@ -216,7 +216,7 @@ jobs:
             echo "NEWRESNAME=$NEWRESNAME" >> $GITHUB_OUTPUT
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           creds:  ${{ secrets.AZURE_CREDENTIALS }}
           enable-AzPSSession: false
@@ -226,7 +226,7 @@ jobs:
       - name: Verify any active Azure Resource Group Deployments #These can mess up our deployment
         if: github.event.inputs.doDebugSteps == 'true'
         id: activedeps
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         with:
           azcliversion: ${{ env.AZCLIVERSION }}
           inlineScript: |
@@ -247,7 +247,7 @@ jobs:
             fi
 
       - name: Validate Infrastructure deployment
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         with:
           azcliversion: ${{ env.AZCLIVERSION }}
           inlineScript: |
@@ -255,7 +255,7 @@ jobs:
 
       - name: What If
         if: github.event.inputs.doDebugSteps == 'true'
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         continue-on-error: ${{ secrets.ISAZCLIWHATIFUNRELIABLE == 'true' }}
         with:
           azcliversion: ${{ env.AZCLIVERSION }}
@@ -277,7 +277,7 @@ jobs:
       REGION: ${{ needs.Validation.outputs.REGION }}
       RESNAME: ${{ needs.Validation.outputs.RESNAME }}
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Job parameter check
         if: github.event.inputs.doVerifySteps == 'true'
@@ -304,7 +304,7 @@ jobs:
           }
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           creds:  ${{ secrets.AZURE_CREDENTIALS }}
           enable-AzPSSession: true
@@ -313,7 +313,7 @@ jobs:
 
       - name: Deploy Infrastructure
         id:  deployAks
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         with:
           azcliversion: ${{ env.AZCLIVERSION }}
           inlineScript: |
@@ -348,7 +348,7 @@ jobs:
           sleep $DELAY
 
       - name: Enable AGIC Addon
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         with:
           azcliversion: ${{ env.AZCLIVERSION }}
           inlineScript: |

.github/workflows/Lighthouse.yml

@@ -20,20 +20,20 @@ jobs:
   lighthouse:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3.3.0
+    - uses: actions/checkout@v4.1.1
 
     - name: Prep file system
       run: mkdir ${{ env.outputdir }}
 
     - name: Lighthouse Checks
-      uses: foo-software/lighthouse-check-action@v9.1.0
+      uses: foo-software/lighthouse-check-action@v10.0.0
       id: lighthouseCheck
       with:
         urls: ${{ env.websiteUrl }}
         outputDirectory: ${{ env.outputdir }}
 
     - name: Upload Lighthouse report
-      uses: actions/upload-artifact@v3.1.2
+      uses: actions/upload-artifact@v4.3.1
       with:
         name: Lighthouse reports
         path: ${{ env.outputdir }}

.github/workflows/PostDeploy.yml

@@ -43,7 +43,7 @@ jobs:
       RG: "${{ inputs.RG }}"
       AKSNAME: "${{ inputs.AKSNAME }}"
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
         name: Script file download
 
       - name: Job parameter inspection
@@ -53,7 +53,7 @@ jobs:
           echo "CertManager version is ${{ inputs.CERTMANAGERVERSION }}"
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
           enable-AzPSSession: false

.github/workflows/StandardCI.yml

@@ -63,7 +63,7 @@ jobs:
 
     steps:
       #Get the code files from the repo
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Job parameter check
         run: |
@@ -87,14 +87,14 @@ jobs:
           }
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}
           subscription-id: ${{ secrets.AZURE_SUBSCRIPTION_ID }}
 
       - name: Validate Infrastructure deployment
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         with:
           azcliversion: ${{ env.AZCLIVERSION }}
           inlineScript: |
@@ -119,10 +119,10 @@ jobs:
     environment: ${{ github.event.inputs.environment }}
     needs: [Deploy]
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           client-id: ${{ secrets.AZURE_CLIENT_ID }}
           tenant-id: ${{ secrets.AZURE_TENANT_ID }}

.github/workflows/Test_ReusableWorkflows.yml

@@ -100,7 +100,7 @@ jobs:
         run: mkdir jsonout
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
           enable-AzPSSession: false
@@ -177,7 +177,7 @@ jobs:
 
       - name: Save Json output as Artifact
         if: always()
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.3.1
         with:
           name: Json out
           path: jsonout/*.json
@@ -227,7 +227,7 @@ jobs:
 
     name: Create extra bicep artifacts
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Set better name of artifact
         id: artifactName
@@ -281,7 +281,7 @@ jobs:
 
     name: Add extra release file-artifacts
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Verify File
         run: cat ${{ matrix.files }}

.github/workflows/bicepBuild.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: ContextCheck
         shell: pwsh
@@ -47,7 +47,7 @@ jobs:
 
           /home/runner/.azure/bin/bicep build bicep/main.bicep --outdir $compiledir
 
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
         if: github.event_name != 'push'
         name: Git Checkout target
         with:

.github/workflows/brokenlinks.yml

@@ -12,11 +12,11 @@ jobs:
   repoLinkChecker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Link Checker
         id: lychee
-        uses: lycheeverse/lychee-action@v1.8.0
+        uses: lycheeverse/lychee-action@v1.9.3
         env:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
         with:
@@ -25,7 +25,7 @@ jobs:
 
       - name: Create Issue From File
         if: steps.lychee.outputs.exit_code != 0
-        uses: peter-evans/create-issue-from-file@v4.0.1
+        uses: peter-evans/create-issue-from-file@v5.0.0
         with:
           title: 'Bot: Broken Links Detected in Repo'
           content-filepath: ./lychee/out.md
@@ -34,7 +34,7 @@ jobs:
   helperLinkChecker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Playwright - Install w/ OS dependencies
         run: |
@@ -61,7 +61,7 @@ jobs:
 
       - name: Link Checker
         id: lychee
-        uses: lycheeverse/lychee-action@v1.8.0
+        uses: lycheeverse/lychee-action@v1.9.3
         env:
           GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}}
         with:
@@ -70,7 +70,7 @@ jobs:
 
       - name: Create Issue From File
         if: steps.lychee.outputs.exit_code != 0
-        uses: peter-evans/create-issue-from-file@v4.0.1
+        uses: peter-evans/create-issue-from-file@v5.0.0
         with:
           title: 'Bot: Broken Links Detected in AKSC Helper'
           content-filepath: ./lychee/out.md

.github/workflows/cleanupRg.yml

@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     environment: ${{ inputs.environment }}
     steps:
-    - uses: azure/login@v1.4.6
+    - uses: azure/login@v2
       name: Login to Azure
       with:
         client-id: ${{ secrets.AZURE_CLIENT_ID }}
@@ -44,7 +44,7 @@ jobs:
         Set-PSRepository -Name PSGallery -InstallationPolicy Trusted
         Install-Module -Name Az.Accounts
         Install-Module -Name Az.Resources
-        
+
     - name: Cleanup
       shell: pwsh
       run: |
@@ -54,13 +54,13 @@ jobs:
         try {
           #Remove all but public ip addresses
           Get-AzResource -ResourceGroupName $rgToPurge.ResourceGroupName | ? {$_.ResourceType -ne "Microsoft.Network/publicIPAddresses"} | Remove-AzResource -Force
-          
+
           #Remove public ip addresses
           Get-AzResource -ResourceGroupName $rgToPurge.ResourceGroupName | ? {$_.ResourceType -eq "Microsoft.Network/publicIPAddresses"} | Remove-AzResource -Force
-          
+
           #Final run to clean other dependant resources in parent-child graph
           Get-AzResource -ResourceGroupName $rgToPurge.ResourceGroupName | Remove-AzResource -Force
-          
+
           #Remove unknown/invalid role assignments from rg
           Get-AzRoleAssignment -Scope $rgToPurge.ResourceId | where ObjectType -eq 'Unknown' | Remove-AzRoleAssignment
         }

.github/workflows/codeql-analysis.yml

@@ -38,7 +38,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3.3.0
+      uses: actions/checkout@v4.1.1
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/ghpages.yml

@@ -47,9 +47,9 @@ jobs:
   Spelling:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
-      - uses: streetsidesoftware/cspell-action@v2.16.0
+      - uses: streetsidesoftware/cspell-action@v6.1.0
         name: Spell Check
         if: ${{github.event_name!='workflow_dispatch'}}
         with:

.github/workflows/ghpagesTest.yml

@@ -35,7 +35,7 @@ jobs:
       cancel-in-progress: true
       group: FullDeploy${{ !github.event.pull_request.head.repo.fork && ( inputs.doAzCmdDeployment == 'true' || contains( github.event.pull_request.labels.*.name, 'test-deploy-wizard')) }}
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Build and start node app (targeting Bicep in MAIN)
         if: inputs.REACT_APP_TEMPLATERELEASE == ''
@@ -112,7 +112,7 @@ jobs:
 
       - name: Persist exported Az Commands for visibility
         if: ${{ github.event.pull_request.head.repo.fork }}
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.3.1
         with:
           name: AzCmds
           path: helper/azcmd-*.sh
@@ -141,7 +141,7 @@ jobs:
 
       - name: Azure Login
         if: ${{ !github.event.pull_request.head.repo.fork }}
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
           enable-AzPSSession: true
@@ -150,7 +150,7 @@ jobs:
       #TODO: If/When we capture more AZ CMD's, then we'll want to iterate over files beginning with "azcmd"
       - name: Verify AZ Commands
         if: ${{ !github.event.pull_request.head.repo.fork }}
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         env:
           azcmdpath: "helper/azcmd-managed-private.sh"
         with:
@@ -171,7 +171,7 @@ jobs:
 
       - name: Full deploy test AZ Commands
         if: ${{ !github.event.pull_request.head.repo.fork && ( inputs.doAzCmdDeployment == 'true' || contains( github.event.pull_request.labels.*.name, 'test-deploy-wizard')) }}
-        uses: Azure/cli@v1.0.7
+        uses: Azure/cli@v2
         env:
           azcmdpath: "helper/azcmd-managed-private.sh"
         with:
@@ -190,14 +190,14 @@ jobs:
             #az deploymentg group delete -n ghpages  -g $RG
 
       - name: Persist test failure screengrabs as artifacts
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.3.1
         if: failure()
         with:
           name: TestFailScreengrabs
           path: helper/failscreengrabs/*.png
 
       - name: Persist always screengrabs as artifacts
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.3.1
         if: always()
         with:
           name: Screengrabs

.github/workflows/greetings.yml

@@ -9,7 +9,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-    - uses: actions/first-interaction@v1.1.1
+    - uses: actions/first-interaction@v1.3.0
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
         issue-message: 'Thanks for raising your first issue, the team appreciates the time you have taken 😉'

.github/workflows/label.yml

@@ -1,23 +1 @@
-# This workflow will triage pull requests and apply a label based on the
-# paths that are modified in the pull request.
-#
-# To use this workflow, you will need to set up a .github/labeler.yml
-# file with configuration.  For more information, see:
-# https://github.com/actions/labeler
-
-name: Labeler
-on: [pull_request]
-
-jobs:
-  label:
-    if: ${{ !github.event.pull_request.head.repo.fork }}
-
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pull-requests: write
-
-    steps:
-    - uses: actions/labeler@v4.0.2
-      with:
-        repo-token: "${{ secrets.GITHUB_TOKEN }}"
+actions/labeler@v5.0.0

.github/workflows/markdownchecks.yml

@@ -5,14 +5,14 @@ jobs:
   Validation:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Typo file contents check
         shell: bash
         run: cat ./.github/workflows_dep/_typos.toml
 
       - name: Check spelling of markdown files
-        uses: crate-ci/typos@v1.12.8
+        uses: crate-ci/typos@v1.20.6
         with:
           files: ./*.md
           config: ./.github/workflows_dep/_typos.toml

.github/workflows/regressionparams.yml

@@ -36,7 +36,7 @@ jobs:
       FILELIST: ${{ steps.getfiles.outputs.FILELIST}}
     steps:
       #Get the code files from the repo
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Job parameter check
         run: |
@@ -63,7 +63,7 @@ jobs:
 
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Job parameter check
         run: |

.github/workflows/release-soft.yml

@@ -17,7 +17,7 @@ jobs:
     outputs:
       LatestAkscVersionTag: ${{ steps.AkscTags.outputs.LATEST}}
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
         with:
           fetch-depth: 0
 
@@ -106,14 +106,14 @@ jobs:
     env:
       templateRelease: ${{ needs.VerifySoftPossible.outputs.LatestAkscVersionTag }}
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Job Parameter Checking
         run: |
           echo "GitHub Ref: ${{ github.ref }}"
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
 
@@ -131,7 +131,7 @@ jobs:
           REACT_APP_APPINSIGHTS_KEY=${{ secrets.REACT_APP_APPINSIGHTS_KEY}} REACT_APP_TEMPLATERELEASE="${{env.templateRelease}}"  npm run build
 
       - name: Create GitHub pages release artifact
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.3.1
         with:
           name: HelperApp
           path: helper/build
@@ -143,13 +143,13 @@ jobs:
     env:
       templateRelease: ${{ needs.VerifySoftPossible.outputs.LatestAkscVersionTag }}
     steps:
-      - uses: actions/download-artifact@v3.0.2
+      - uses: actions/download-artifact@v4.1.4
         with:
           name: HelperApp
           path: helperapp
 
       - name: Deploy to GitHub Pages Canary
-        uses: crazy-max/ghaction-github-pages@v3.1.0
+        uses: crazy-max/ghaction-github-pages@v4.0.0
         with:
           target_branch: gh-pages-canary
           commit_message: Pages Release. Canary ${{env.templateRelease}}
@@ -167,13 +167,13 @@ jobs:
     env:
       templateRelease: ${{ needs.VerifySoftPossible.outputs.LatestAkscVersionTag }}
     steps:
-      - uses: actions/download-artifact@v3.0.2
+      - uses: actions/download-artifact@v4.1.4
         with:
           name: HelperApp
           path: helperapp
 
       - name: Deploy to GitHub Pages Prod
-        uses: crazy-max/ghaction-github-pages@v3.1.0
+        uses: crazy-max/ghaction-github-pages@v4.0.0
         with:
           target_branch: gh-pages
           commit_message: Pages Release. Prod ${{env.templateRelease}}

.github/workflows/release.yml

@@ -42,14 +42,14 @@ jobs:
     runs-on: ubuntu-latest
     name: Build Web App
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Job Parameter Checking
         run: |
           echo "GitHub Ref: ${{ github.ref }}"
 
       - name: Azure Login
-        uses: Azure/login@v1.4.6
+        uses: azure/login@v2
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
 
@@ -67,7 +67,7 @@ jobs:
           REACT_APP_APPINSIGHTS_KEY=${{ secrets.REACT_APP_APPINSIGHTS_KEY}} REACT_APP_TEMPLATERELEASE="${{env.templateRelease}}"  npm run build
 
       - name: Create GitHub pages release artifact
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.3.1
         with:
           name: HelperApp
           path: helper/build
@@ -77,7 +77,7 @@ jobs:
     name: Create GitHub Release (bicep)
     if: ${{ github.event.inputs.createRelease == 'true' }}
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Check that the GitHub release does not already exist
         run: |
@@ -112,7 +112,7 @@ jobs:
           /home/runner/.azure/bin/bicep build bicep/main.bicep --outdir $compiledir
 
       - name: Create Bicep release artifact
-        uses: actions/upload-artifact@v3.1.2
+        uses: actions/upload-artifact@v4.3.1
         with:
           name: CompiledBicep
           path: bicep/compiled/main.json
@@ -138,7 +138,7 @@ jobs:
     name: Add extra release file-artifacts
     if: ${{ github.event.inputs.createRelease == 'true' }}
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Verify File
         run: cat ${{ matrix.files }}
@@ -162,7 +162,7 @@ jobs:
     name: Create extra bicep artifacts
     if: ${{ github.event.inputs.createRelease == 'true' }}
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4.1.1
 
       - name: Set better name of artifact
         id: artifactName
@@ -210,20 +210,20 @@ jobs:
     if: ${{ always() }}
     needs: [BuildWebApp , CreateRelease, CreateExtraBicepArtifacts, TestWebApp]
     steps:
-      - uses: actions/download-artifact@v3.0.2
+      - uses: actions/download-artifact@v4.1.4
         with:
           name: HelperApp
           path: helperapp
 
       #Although we don't need this artifact, if it's missing then we can abort this job
-      - uses: actions/download-artifact@v3.0.2
+      - uses: actions/download-artifact@v4.1.4
         if: ${{ github.event.inputs.createRelease == 'true' }}
         with:
           name: CompiledBicep
           path: compilebicep
 
       - name: Deploy to GitHub Pages Canary
-        uses: crazy-max/ghaction-github-pages@v3.1.0
+        uses: crazy-max/ghaction-github-pages@v4.0.0
         with:
           target_branch: gh-pages-canary
           commit_message: Pages Release. Canary ${{env.templateRelease}}
@@ -239,20 +239,20 @@ jobs:
     environment: UI-Deploy-Manual-Approval
     needs: [BuildWebApp , CreateRelease, DeployWebAppToCanary]
     steps:
-      - uses: actions/download-artifact@v3.0.2
+      - uses: actions/download-artifact@v4.1.4
         with:
           name: HelperApp
           path: helperapp
 
       #Although we don't need this artifact, if it's missing then we can abort this job
-      - uses: actions/download-artifact@v3.0.2
+      - uses: actions/download-artifact@v4.1.4
         if: ${{ github.event.inputs.createRelease == 'true' }}
         with:
           name: CompiledBicep
           path: compilebicep
 
       - name: Deploy to GitHub Pages Prod
-        uses: crazy-max/ghaction-github-pages@v3.1.0
+        uses: crazy-max/ghaction-github-pages@v4.0.0
         with:
           target_branch: gh-pages
           commit_message: Pages Release. Prod ${{env.templateRelease}}

.github/workflows/stale.yml

@@ -23,7 +23,7 @@ jobs:
       pull-requests: write
 
     steps:
-    - uses: actions/stale@v7.0.0
+    - uses: actions/stale@v9.0.0
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
         stale-issue-message: 'Issue smells stale, no activity for 30 days. Stale Label will be removed if the issue is updated, otherwise closed in a month.'