Bump the development-dependencies group across 1 directory with 4 updates (#729)

Bumps the development-dependencies group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/upload-artifact](https://github.com/actions/upload-artifact), [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) and [github/codeql-action](https://github.com/github/codeql-action).


Updates `actions/checkout` from 3 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

Updates `actions/upload-artifact` from 3 to 4
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v3...v4)

Updates `slackapi/slack-github-action` from 1.19.0 to 1.26.0
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Commits](https://github.com/slackapi/slack-github-action/compare/v1.19.0...v1.26.0)

Updates `github/codeql-action` from 2 to 3
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
- dependency-name: slackapi/slack-github-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/central-release.yml

@@ -14,7 +14,7 @@ jobs:
     name: Release Sonatype Staging Repo
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: spring-io/spring-gradle-build-action@v2
       - name: Release Sonatype repo to Maven Central
         env:

.github/workflows/check-samples.yml

@@ -23,7 +23,7 @@ jobs:
       project_version: ${{ steps.continue.outputs.project_version }}
       boot_version: ${{ steps.continue.outputs.boot_version }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - id: continue
         name: Determine if should continue
         run: |
@@ -43,7 +43,7 @@ jobs:
     runs-on: ubuntu-latest
     if: needs.prerequisites.outputs.runjobs
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: spring-io/spring-gradle-build-action@v2
       - name: Check samples project
         env:

.github/workflows/ci-pr.yml

@@ -17,7 +17,7 @@ jobs:
       project_version: ${{ steps.continue.outputs.project_version }}
       boot_version: ${{ steps.continue.outputs.boot_version }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - id: continue
         name: Determine if should continue
         run: |
@@ -34,14 +34,14 @@ jobs:
     runs-on: ubuntu-latest
     if: needs.prerequisites.outputs.runjobs
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: spring-io/spring-gradle-build-action@v2
       - name: Build and run unit tests
         run: |
           ./gradlew clean build -x integrationTest --continue --scan
       - name: Upload Test Results
         if: failure()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: test-results
           path: '*/build/reports/tests/**/*.*'
@@ -54,7 +54,7 @@ jobs:
           ./gradlew jacocoTestCoverageVerification --info
       - name: Upload Aggregated Jacoco Report
         if: failure() || contains(github.event.pull_request.labels.*.name, 'ci/upload-jacoco')
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: jacoco-results
           path: 'build/reports/jacoco/**/*.*'
@@ -64,14 +64,14 @@ jobs:
     runs-on: ubuntu-latest
     if: needs.prerequisites.outputs.runjobs
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: spring-io/spring-gradle-build-action@v2
       - name: Run integration tests
         run: |
           ./gradlew integrationTest --rerun-tasks -DdownloadRabbitConnector=true --scan
       - name: Capture Test Results
         if: failure()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: test-results
           path: '*/build/reports/tests/**/*.*'
@@ -84,7 +84,7 @@ jobs:
     runs-on: ubuntu-latest
     if: needs.prerequisites.outputs.runjobs
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: spring-io/spring-gradle-build-action@v2
       - name: Run all sample app tests
         env:

.github/workflows/ci.yml

@@ -28,7 +28,7 @@ jobs:
       project_version: ${{ steps.continue.outputs.project_version }}
       boot_version: ${{ steps.continue.outputs.boot_version }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - id: continue
         name: Determine if should continue
         run: |
@@ -45,7 +45,7 @@ jobs:
     runs-on: ubuntu-latest
     if: needs.prerequisites.outputs.runjobs
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: spring-io/spring-gradle-build-action@v2
       - name: Build and run unit tests
         run: |
@@ -57,7 +57,7 @@ jobs:
           ./gradlew integrationTest --rerun-tasks -DdownloadRabbitConnector=true --scan
       - name: Capture test results
         if: failure()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: test-results
           path: '*/build/reports/tests/**/*.*'
@@ -71,7 +71,7 @@ jobs:
     runs-on: ubuntu-latest
     if: needs.prerequisites.outputs.runjobs
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: spring-io/spring-gradle-build-action@v2
       - name: Run all sample app tests
         env:
@@ -100,7 +100,7 @@ jobs:
     needs: [build_jdk_17, check_samples, scan]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: spring-io/spring-gradle-build-action@v2
       - name: Deploy artifacts
         env:
@@ -118,7 +118,7 @@ jobs:
     needs: [build_jdk_17, check_samples, scan]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: spring-io/spring-gradle-build-action@v2
       - name: Run Antora
         run: |
@@ -150,7 +150,7 @@ jobs:
       BRANCH: ${{ github.ref_name }}
       VERSION: ${{ needs.prerequisites.outputs.project_version }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           token: ${{ secrets.GH_ACTIONS_REPO_TOKEN }}
       - uses: spring-io/spring-gradle-build-action@v2
@@ -202,7 +202,7 @@ jobs:
           --notes-file $RELEASE_NOTES_FILE
       - name: Announce Release on Slack
         id: spring-pulsar-announcing
-        uses: slackapi/slack-github-action@v1.19.0
+        uses: slackapi/slack-github-action@v1.26.0
         with:
           payload: |
             {

.github/workflows/codeql.yml

@@ -36,11 +36,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -55,6 +55,6 @@ jobs:
         ./gradlew clean build -x test -x integrationTest
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v3
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/deploy-docs-dispatcher-antora.yml

@@ -9,7 +9,7 @@ jobs:
     if: github.repository_owner == 'spring-projects'
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           ref: docs-build
           fetch-depth: 1

.github/workflows/prepare-release.yml

@@ -21,7 +21,7 @@ jobs:
     steps:
       - id: checkout-source
         name: Checkout source code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           token: ${{ secrets.GH_ACTIONS_REPO_TOKEN }}
 

.github/workflows/trivy-scan.yml

@@ -33,7 +33,7 @@ jobs:
     env:
       LOCAL_REPOSITORY_PATH: ./build/publications/repos
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
       - uses: spring-io/spring-gradle-build-action@v2
       - name: Publish to local repo (poms)
         run: |
@@ -46,6 +46,6 @@ jobs:
           trivy-config: ${{ inputs.config-path }}
       - name: Upload Trivy scan results to GitHub Security tab
         if: inputs.upload-results
-        uses: github/codeql-action/upload-sarif@v2
+        uses: github/codeql-action/upload-sarif@v3
         with:
           sarif_file: 'trivy-results.sarif'