FOLIO-4382 Upgrade various Actions for Maven and Docker Workflows

.github/workflows/docker-description.yml

@@ -36,7 +36,7 @@ jobs:
 
       - name: Download ModuleDescriptor
         if: ${{ inputs.publish-module-descriptor }}
-        uses: actions/download-artifact@v6
+        uses: actions/download-artifact@v8
         with:
           name: ModuleDescriptor.json
 

.github/workflows/docker-publish.yml

@@ -47,14 +47,14 @@ jobs:
           fetch-depth: 1
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.dockerhub-username }}
           password: ${{ secrets.dockerhub-token }}
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ inputs.docker-registry }}/${{ inputs.artifact-id }}
           labels: |
@@ -67,7 +67,7 @@ jobs:
             type=raw,value=${{ inputs.artifact-version }}
 
       - name: Build and push Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           push: ${{ inputs.docker-push }}

.github/workflows/maven-build.yml

@@ -74,7 +74,7 @@ jobs:
           fi
 
       - name: Upload apidocs as build artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         if: ${{ steps.discover-apidocs.outputs.has-maven-apidocs == 'True' }}
         with:
           name: apidocs
@@ -95,14 +95,14 @@ jobs:
           ' sh {} \;
 
       - name: Upload all jars as a build artifact
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: built-jars
           path: /tmp/ci-artifacts/**/*.jar
           retention-days: 1
 
       - name: Upload additional build artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: build-artifacts
           path: |

.github/workflows/maven-docker-publish.yml

@@ -64,14 +64,14 @@ jobs:
           EOF
 
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.dockerhub-username }}
           password: ${{ secrets.dockerhub-token }}
 
       - name: Extract metadata (tags, labels) for Docker
         id: meta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: ${{ inputs.docker-registry }}/${{ inputs.artifact-id }}
           labels: |
@@ -84,7 +84,7 @@ jobs:
             type=raw,value=${{ inputs.artifact-version }}
 
       - name: Download target jars artifact
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: built-jars
           path: .
@@ -140,7 +140,7 @@ jobs:
           echo "loop-count=$i (max_startup_wait=$max_startup_wait)"
 
       - name: Build ${{ inputs.do-docker-push == 'True' && 'and push ' || '' }}Docker image
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v7
         with:
           context: .
           push: ${{ inputs.do-docker-push == 'True' }}

.github/workflows/maven-module-descriptor-get.yml

@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Download build artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: build-artifacts
           path: .
@@ -57,7 +57,7 @@ jobs:
       # we publish it to the registry as a separate job
       - name: Upload ModuleDescriptor as build artifact
         if: ${{ steps.discover-md.outputs.has-module-descriptor == 'True' }}
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: ModuleDescriptor.json
           path: ModuleDescriptor.json

.github/workflows/maven-module-descriptor-publish.yml

@@ -19,12 +19,12 @@ jobs:
 
     steps:
       - name: Download ModuleDescriptor
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: ModuleDescriptor.json
 
       - name: Publish ModuleDescriptor
-        uses: fjogeleit/http-request-action@v1
+        uses: fjogeleit/http-request-action@v2
         with:
           url: ${{ inputs.module-descriptor-registry }}/_/proxy/modules
           method: 'POST'

.github/workflows/maven-module-descriptor-verify.yml

@@ -19,7 +19,7 @@ jobs:
 
     steps:
       - name: Login to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.dockerhub-username }}
           password: ${{ secrets.dockerhub-token }}
@@ -38,7 +38,7 @@ jobs:
         run: sleep 10
 
       - name: Pull all module descriptors into Okapi
-        uses: fjogeleit/http-request-action@v1
+        uses: fjogeleit/http-request-action@v2
         with:
           url: http://${{ steps.okapi-ip.outputs.ip }}:9130/_/proxy/pull/modules
           method: 'POST'
@@ -48,13 +48,13 @@ jobs:
           timeout: 90000
 
       - name: Download ModuleDescriptor artifact
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: ModuleDescriptor.json
 
       - name: Send ModuleDescriptor to Okapi
         id: send-md
-        uses: fjogeleit/http-request-action@v1
+        uses: fjogeleit/http-request-action@v2
         with:
           url: http://${{ steps.okapi-ip.outputs.ip }}:9130/_/proxy/modules?preRelease=false&npmSnapshot=false
           method: 'POST'

.github/workflows/maven-sonar.yml

@@ -35,7 +35,7 @@ jobs:
           submodules: recursive
 
       - name: Retrieve build artifacts
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: build-artifacts
           path: .

.github/workflows/maven-upload-apidocs.yml

@@ -33,7 +33,7 @@ jobs:
 
     steps:
       - name: Download artifact apidocs
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v8
         with:
           name: apidocs
           path: apidocs

CHANGELOG.md

@@ -3,16 +3,27 @@
 ## IN PROGRESS
 
 * (Add more progress summary items here.)
-* bump node-version from v20.x to v22.x. Refs FOLIO-4469.
 
-## [1.13.4](https://github.com/folio-org/.github/tree/v1.13.4) (2026-03-10)
+## [1.14.1](https://github.com/folio-org/.github/tree/v1.14.1) (2026-03-20)
+[Full Changelog](https://github.com/folio-org/.github/compare/v1.14.0...v1.14.1)
 
-* FOLIO-4472 Increase timeout for all ModuleDescriptor publish - in #121
+* FOLIO-4382 Upgrade various Actions for Maven and Docker Workflows in #125
+
+## [1.14.0](https://github.com/folio-org/.github/tree/v1.14.0) (2026-03-18)
+[Full Changelog](https://github.com/folio-org/.github/compare/v1.13.4...v1.14.0)
+
+* Doc: Update README-maven.md - in #122
+* FOLIO-4132 Doc: Do re-run failed job Publish ModuleDescriptor - in #123
+* FOLIO-4469 bump node from v20.x to v22.x - in #124
 
+## [1.13.4](https://github.com/folio-org/.github/tree/v1.13.4) (2026-03-10)
 [Full Changelog](https://github.com/folio-org/.github/compare/v1.13.3...v1.13.4)
 
+* FOLIO-4472 Increase timeout for all ModuleDescriptor publish - in #121
+
 ## [1.13.3](https://github.com/folio-org/.github/tree/v1.13.3) (2026-02-12)
 [Full Changelog](https://github.com/folio-org/.github/compare/v1.13.2...v1.13.3)
+
 * FOLIO-4109 Improve release-procedures doc patch release - in #114
 * FOLIO-4454 Document Maven release procedures - in #115
 * FOLIO-4462 Disable UI test result comments on PRs for dependabot branches - in #117