fix(gha): update actions versions

[gforcada]

No description provided.

[mister-roboto]

@gforcada thanks for creating this Pull Request and helping to improve Plone!

TL;DR: Finish pushing changes, pass all other checks, then paste a comment:

@jenkins-plone-org please run jobs

To ensure that these changes do not break other parts of Plone, the Plone test suite matrix needs to pass, but it takes 30-60 min. Other CI checks are usually much faster and the Plone Jenkins resources are limited, so when done pushing changes and all other checks pass either start all Jenkins PR jobs yourself, or simply add the comment above in this PR to start all the jobs automatically.

Happy hacking!

[stevepiercy]

Out of curiosity, is there any way to automate this kind of task, similar to dependabot? I subscribe to releases of GHAs that I use in Training, Documentation, and Plone Sphinx Theme, but it's a manual process.

[gforcada]

@stevepiercy as of late, we are adding .github/dependabot.yml on repos that use latest plone.meta.

That should generate PRs to bump those versions. The actual file, for copy and paste:

https://github.com/plone/meta/blob/2.x/src/plone/meta/default/dependabot.yml

[stevepiercy]

@gforcada thank you! An action to monitor actions, whoa, inception! 🤯