Bump the github-actions group with 6 updates

.github/workflows/bindings-sysman-python-checks.yml

@@ -40,10 +40,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Set up Python ${{ env.PYTHON_VERSION }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: ${{ env.PYTHON_VERSION }}
 

.github/workflows/bindings-sysman-python-security-scan.yml

@@ -37,10 +37,10 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
 
       - name: Set up Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: '3.x'
 
@@ -55,7 +55,7 @@ jobs:
           bandit -r source/ test/ -ll -f screen
 
       - name: Upload Bandit results as artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: bandit-security-report

.github/workflows/bindings-sysman-python-unit-tests-coverage.yml

@@ -40,12 +40,12 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0  # Full history for better coverage comparison
 
       - name: Set up Python ${{ env.PYTHON_VERSION }}
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@v7
         with:
           python-version: ${{ env.PYTHON_VERSION }}
           cache: 'pip'
@@ -285,7 +285,7 @@ jobs:
           fi
 
       - name: Upload Test Results
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: test-results-${{ github.run_number }}
@@ -298,7 +298,7 @@ jobs:
           retention-days: 30
 
       - name: Upload Coverage Reports
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         if: always()
         with:
           name: coverage-report-${{ github.run_number }}

.github/workflows/build-clang.yml

@@ -27,7 +27,7 @@ jobs:
         run: |
           apt-get update
           apt-get install -y clang cmake make git
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Build Loader (${{ matrix.build_type }}) with Clang on ${{ matrix.container }}
         run: |
           mkdir build

.github/workflows/build-msi-package.yml

@@ -12,7 +12,7 @@ jobs:
     if: github.repository_owner == 'oneapi-src'
     runs-on: [windows-latest]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Setup Windows build environment
         uses: ilammy/msvc-dev-cmd@v1
         with:

.github/workflows/build-multi-static.yml

@@ -19,7 +19,7 @@ jobs:
       short-sha: ${{ steps.const.outputs.short-sha }}
       ref-slug: ${{ steps.const.outputs.ref-slug }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         clean: true
         ref: ${{ github.event.pull_request.head.sha }}
@@ -86,15 +86,15 @@ jobs:
         image-name=ghcr.io/${{ github.repository }}/${OS_STRING}
         ccache-dir=${CCACHE_DIR}
         EOF
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         clean: true
         fetch-depth: 0
         ref: ${{ github.event.pull_request.head.sha }}
     - name: Create Ccache directory
       run: mkdir -p '${{ steps.const.outputs.ccache-dir }}'
     - name: Ccache
-      uses: actions/cache@v4
+      uses: actions/cache@v6
       with:
         path: ${{ steps.const.outputs.ccache-dir }}
         key: ccache-${{ github.job }}-${{ steps.const.outputs.os-string }}${{ env.ARCH_SUFFIX }}-${{ matrix.target }}-${{ github.sha }}

.github/workflows/build-multi.yml

@@ -19,7 +19,7 @@ jobs:
       short-sha: ${{ steps.const.outputs.short-sha }}
       ref-slug: ${{ steps.const.outputs.ref-slug }}
     steps:
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         clean: true
         ref: ${{ github.event.pull_request.head.sha }}
@@ -104,15 +104,15 @@ jobs:
         image-name=ghcr.io/${{ github.repository }}/${OS_STRING}
         ccache-dir=${CCACHE_DIR}
         EOF
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         clean: true
         fetch-depth: 0
         ref: ${{ github.event.pull_request.head.sha }}
     - name: Create Ccache directory
       run: mkdir -p '${{ steps.const.outputs.ccache-dir }}'
     - name: Ccache
-      uses: actions/cache@v4
+      uses: actions/cache@v6
       with:
         path: ${{ steps.const.outputs.ccache-dir }}
         key: ccache-${{ github.job }}-${{ steps.const.outputs.os-string }}${{ env.ARCH_SUFFIX }}-${{ matrix.target }}-${{ github.sha }}

.github/workflows/build-quick-static-n-1.yml

@@ -14,15 +14,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       # Use ccache-action for ccache setup and caching
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           path: pr
       - uses: hendrikmuhs/ccache-action@v1
 
       # Checkout master branch for static loader source
       - name: Checkout master branch for static loader
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           ref: master
           fetch-depth: 0
@@ -73,14 +73,14 @@ jobs:
     runs-on: windows-latest
     steps:
       # Checkout PR branch (dynamic loader source)
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
           path: pr
 
       # Checkout master branch for static loader source
       - name: Checkout master branch for static loader
-        uses: actions/checkout@v5
+        uses: actions/checkout@v7
         with:
           ref: master
           fetch-depth: 0

.github/workflows/build-quick-static.yml

@@ -12,7 +12,7 @@ jobs:
     if: github.repository_owner == 'oneapi-src'
     runs-on: [ubuntu-latest]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - uses: hendrikmuhs/ccache-action@v1
       - name: Build Static Loader on Latest Ubuntu
         run: |
@@ -48,7 +48,7 @@ jobs:
     if: github.repository_owner == 'oneapi-src'
     runs-on: [windows-latest]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Setup Windows build environment
         uses: ilammy/msvc-dev-cmd@v1
         with:

.github/workflows/build-quick.yml

@@ -31,7 +31,7 @@ jobs:
             apt-get update
             apt-get install -y build-essential cmake git
           fi
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Build Loader on ${{ matrix.container }}
         run: |
           mkdir build
@@ -71,7 +71,7 @@ jobs:
     if: github.repository_owner == 'oneapi-src'
     runs-on: [windows-latest]
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
       - name: Setup Windows build environment
         uses: ilammy/msvc-dev-cmd@v1
         with:

.github/workflows/check-abi.yml

@@ -16,21 +16,21 @@ jobs:
       run: |
         sudo apt update
         sudo apt install -y elfutils universal-ctags vtable-dumper
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         fetch-depth: 0 # Required due to the way Git works, without it this action won't be able to find any or the correct tags
     - uses: actions-ecosystem/action-get-latest-tag@v1
       id: get-latest-tag
       with:
         semver_only: true
     - name: Checkout base
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         ref: ${{ steps.get-latest-tag.outputs.tag }}
         clean: true
         path: base
     - name: Checkout head
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         clean: true
         path: head
@@ -78,7 +78,7 @@ jobs:
           -old base.dump \
           -new head.dump \
           -report-path release_report.html
-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@v7
       if: always()
       with:
         name: abi-report-last-release
@@ -92,13 +92,13 @@ jobs:
         sudo apt update
         sudo apt install -y elfutils universal-ctags vtable-dumper
     - name: Checkout base
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         ref: ${{ github.base_ref }}
         clean: true
         path: base
     - name: Checkout head
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         clean: true
         path: head
@@ -146,7 +146,7 @@ jobs:
           -old base.dump \
           -new head.dump \
           -report-path master_report.html
-    - uses: actions/upload-artifact@v4
+    - uses: actions/upload-artifact@v7
       if: always()
       with:
         name: abi-report-master

.github/workflows/codeql.yml

@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
 

.github/workflows/codespell-comment.yml

@@ -27,14 +27,14 @@ jobs:
     if: github.event.workflow_run.event == 'pull_request'
     steps:
     - name: Download report
-      uses: actions/download-artifact@v4
+      uses: actions/download-artifact@v8
       continue-on-error: true
       with:
         name: codespell-report
         run-id: ${{ github.event.workflow_run.id }}
         github-token: ${{ secrets.GITHUB_TOKEN }}
     - name: Post or update PR comment
-      uses: actions/github-script@v7
+      uses: actions/github-script@v9
       with:
         script: |
           const fs = require('fs');

.github/workflows/codespell.yml

@@ -19,8 +19,8 @@ jobs:
   codespell:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v5
-    - uses: actions/setup-python@v5
+    - uses: actions/checkout@v7
+    - uses: actions/setup-python@v7
       with:
         python-version: '3.x'
     - name: Install codespell
@@ -40,7 +40,7 @@ jobs:
       run: echo "${{ github.event.number }}" > pr_number.txt
     - name: Upload report
       # Consumed by the "Codespell Comment" workflow to post the PR comment.
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: codespell-report
         path: |

.github/workflows/regen-source.yml

@@ -40,7 +40,7 @@ jobs:
           # Floor kept in step with the spec repository's third_party/requirements.txt;
           # verified to produce byte-identical output from 1.3.3 through 1.3.11.
           pip3 install --break-system-packages "Mako>=1.3.3"
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@v7
 
       - name: Regenerate sources from archived spec metadata
         run: python3 scripts/spec_metadata.py regen
@@ -66,7 +66,7 @@ jobs:
 
       - name: Upload drift report
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: regen-diff-linux
           path: regen.diff
@@ -105,8 +105,8 @@ jobs:
     if: github.repository_owner == 'oneapi-src'
     runs-on: [windows-latest]
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-python@v5
+      - uses: actions/checkout@v7
+      - uses: actions/setup-python@v7
         with:
           python-version: '3.x'
       - name: Install dependencies

.github/workflows/scorecard.yml

@@ -26,7 +26,7 @@ jobs:
       id-token: write
     steps:
     - name: "Checkout code"
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         persist-credentials: false
     - name: "Run analysis"
@@ -41,7 +41,7 @@ jobs:
         repo_token: ${{ secrets.SCORECARD_TOKEN }}
         publish_results: true
     - name: "Upload artifact"
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v7
       with:
         name: SARIF file
         path: results.sarif

.github/workflows/update-spec.yml

@@ -33,14 +33,14 @@ jobs:
   generate-code:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/setup-python@v5
+    - uses: actions/setup-python@v7
       with:
         python-version: '3.x'
     - name: Install dependencies
       # Kept in step with the spec repository's third_party/requirements.txt, since
       # this job runs that repository's generators.
       run: pip install "Mako>=1.3.3" "PyYAML>=6.0.1"
-    - uses: actions/checkout@v5
+    - uses: actions/checkout@v7
       with:
         clean: true
         fetch-depth: 0
@@ -55,7 +55,7 @@ jobs:
       if: ${{ github.event_name == 'workflow_dispatch' }}
       run: git reset --hard origin/master
     - name: Checkout spec repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@v7
       with:
         repository: ${{ github.event_name == 'pull_request' && 'oneapi-src/level-zero-spec' || inputs.repository }}
         clean: true