build(deps): bump the github-actions group across 1 directory with 3 updates

Bumps the github-actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [codecov/codecov-action](https://github.com/codecov/codecov-action) and [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request).


Updates `actions/checkout` from 5 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

Updates `codecov/codecov-action` from 5.5.1 to 5.5.2
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v5.5.1...v5.5.2)

Updates `peter-evans/create-pull-request` from 7 to 8
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v7...v8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: codecov/codecov-action
  dependency-version: 5.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

.github/workflows/build-test.yaml

@@ -15,15 +15,15 @@ jobs:
     name: "Build Binary"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
       - uses: "authzed/actions/go-build@main"
 
   image-build:
     name: "Build Container Image"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/docker-build@main"
 
   unit:
@@ -34,12 +34,12 @@ jobs:
         os: ["ubuntu-latest"] # TODO(miparnisari): add "windows-latest" after fixing the tests
 
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
       - name: "Unit tests with coverage"
         run: "go run mage.go test:runWithCoverage"
       - name: "Upload coverage to Codecov"
-        uses: "codecov/[email protected].1"
+        uses: "codecov/[email protected].2"
         with:
           files: "./coverage.txt"
           verbose: true
@@ -50,7 +50,7 @@ jobs:
     name: "WASM Tests"
     runs-on: "depot-ubuntu-24.04-4"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
         with:
           # NOTE: This needs to match the toolchain version, or else

.github/workflows/docs.yaml

@@ -21,15 +21,15 @@ jobs:
     name: "Generate & Sync Documentation"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
       - uses: "authzed/actions/setup-mage@main"
 
       - name: "Generate Documentation"
         run: "mage gen:docsForPublish"
 
       - name: "Checkout docs repository"
-        uses: "actions/checkout@v5"
+        uses: "actions/checkout@v6"
         with:
           token: "${{ secrets.GITHUB_TOKEN }}"
           repository: "${{ env.DOCS_REPO }}"
@@ -50,7 +50,7 @@ jobs:
       - name: "Create commit & pull request"
         if: "steps.check-changes.outputs.docs_changed == 'true'"
         id: "cpr"
-        uses: "peter-evans/create-pull-request@v7"
+        uses: "peter-evans/create-pull-request@v8"
         with:
           token: "${{ secrets.PAT_TO_PUSH_TO_DOCS }}"
           path: "docs-repo"

.github/workflows/lint.yaml

@@ -15,7 +15,7 @@ jobs:
     name: "Lint Go"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
       - uses: "authzed/actions/gofumpt@main"
       - uses: "authzed/actions/go-mod-tidy@main"
@@ -26,7 +26,7 @@ jobs:
     name: "Lint YAML & Markdown"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/yaml-lint@main"
       - uses: "authzed/actions/markdown-lint@main"
         with:
@@ -44,15 +44,15 @@ jobs:
       matrix:
         language: ["go"]
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
       - uses: "authzed/actions/codeql@main"
 
   trivy-fs:
     name: "Analyze FS with Trivy"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "aquasecurity/trivy-action@master"
         with:
           scan-type: "fs"
@@ -68,7 +68,7 @@ jobs:
     name: "Analyze Release Image with Trivy"
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "authzed/actions/setup-go@main"
       # Workaround until goreleaser release supports --single-target
       # makes the build faster by not building everything
@@ -102,5 +102,5 @@ jobs:
     runs-on: "depot-ubuntu-24.04-small"
     if: "github.event_name == 'pull_request' && (github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.action == 'reopened' || github.event.action == 'edited')"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
       - uses: "webiny/[email protected]"

.github/workflows/release-windows.yml

@@ -11,7 +11,7 @@ jobs:
   release-windows:
     runs-on: "windows-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           fetch-depth: 0
       - uses: "authzed/actions/setup-go@main"

.github/workflows/release.yaml

@@ -9,7 +9,7 @@ jobs:
   github:
     runs-on: "macos-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           fetch-depth: 0
       - name: "Install cross-compilers"
@@ -49,7 +49,7 @@ jobs:
   docker:
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v5"
+      - uses: "actions/checkout@v6"
         with:
           fetch-depth: 0
       - uses: "authzed/actions/docker-login@main"