BAU: Bump the gha-all-dependencies group across 1 directory with 17 updates

Bumps the gha-all-dependencies group with 17 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4.2.1` | `5.1.0` |
| [actions/setup-java](https://github.com/actions/setup-java) | `4.7.1` | `5.0.0` |
| [gradle/actions](https://github.com/gradle/actions) | `4.4.1` | `5.0.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `5.0.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `5.0.0` | `6.0.0` |
| [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `3b04099b21072562f07469c10deb182b24236ca9` | `dbf178ceecb9304128c8e0648591d71208c6e2c9` |
| [peter-evans/find-comment](https://github.com/peter-evans/find-comment) | `3.1.0` | `4.0.0` |
| [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) | `4.0.0` | `5.0.0` |
| [bridgecrewio/checkov-action](https://github.com/bridgecrewio/checkov-action) | `12.3056.0` | `12.3068.0` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3.30.0` | `4.31.0` |
| [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.7.3` | `4.8.1` |
| [aws-actions/setup-sam](https://github.com/aws-actions/setup-sam) | `f664fad9e12492edfc187a31f575537dfbb0ff63` | `c71dd89d980e49367c70391e8ada4353f52f2800` |
| [govuk-one-login/devplatform-upload-action](https://github.com/govuk-one-login/devplatform-upload-action) | `3.10.1` | `3.11.0` |
| [actions/setup-python](https://github.com/actions/setup-python) | `5.6.0` | `6.0.0` |
| [actions/cache](https://github.com/actions/cache) | `4.2.4` | `4.3.0` |
| [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) | `3.0.25` | `4.0.0` |



Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4.2.2...08c6903)

Updates `aws-actions/configure-aws-credentials` from 4.2.1 to 5.1.0
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@v4.2.1...0094301)

Updates `actions/setup-java` from 4.7.1 to 5.0.0
- [Release notes](https://github.com/actions/setup-java/releases)
- [Commits](actions/setup-java@v4.7.1...dded088)

Updates `gradle/actions` from 4.4.1 to 5.0.0
- [Release notes](https://github.com/gradle/actions/releases)
- [Commits](gradle/actions@v4.4.1...4d9f0ba)

Updates `actions/upload-artifact` from 4.6.2 to 5.0.0
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@ea165f8...330a01c)

Updates `actions/download-artifact` from 5.0.0 to 6.0.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@634f93c...018cc2c)

Updates `tj-actions/changed-files` from 3b04099b21072562f07469c10deb182b24236ca9 to dbf178ceecb9304128c8e0648591d71208c6e2c9
- [Release notes](https://github.com/tj-actions/changed-files/releases)
- [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md)
- [Commits](tj-actions/changed-files@3b04099...dbf178c)

Updates `peter-evans/find-comment` from 3.1.0 to 4.0.0
- [Release notes](https://github.com/peter-evans/find-comment/releases)
- [Commits](peter-evans/find-comment@3eae4d3...b30e6a3)

Updates `peter-evans/create-or-update-comment` from 4.0.0 to 5.0.0
- [Release notes](https://github.com/peter-evans/create-or-update-comment/releases)
- [Commits](peter-evans/create-or-update-comment@71345be...e8674b0)

Updates `bridgecrewio/checkov-action` from 12.3056.0 to 12.3068.0
- [Release notes](https://github.com/bridgecrewio/checkov-action/releases)
- [Commits](bridgecrewio/checkov-action@7bd1adb...197d539)

Updates `github/codeql-action` from 3.30.0 to 4.31.0
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@2d92b76...4e94bd1)

Updates `actions/dependency-review-action` from 4.7.3 to 4.8.1
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@595b5ae...40c09b7)

Updates `aws-actions/setup-sam` from f664fad9e12492edfc187a31f575537dfbb0ff63 to c71dd89d980e49367c70391e8ada4353f52f2800
- [Release notes](https://github.com/aws-actions/setup-sam/releases)
- [Commits](aws-actions/setup-sam@f664fad...c71dd89)

Updates `govuk-one-login/devplatform-upload-action` from 3.10.1 to 3.11.0
- [Release notes](https://github.com/govuk-one-login/devplatform-upload-action/releases)
- [Commits](govuk-one-login/devplatform-upload-action@v3.10.1...fda7561)

Updates `actions/setup-python` from 5.6.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@a26af69...e797f83)

Updates `actions/cache` from 4.2.4 to 4.3.0
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](actions/cache@0400d5f...0057852)

Updates `zgosalvez/github-actions-ensure-sha-pinned-actions` from 3.0.25 to 4.0.0
- [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases)
- [Commits](zgosalvez/github-actions-ensure-sha-pinned-actions@fc87bb5...9e9574e)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: actions/setup-java
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: gradle/actions
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: actions/upload-artifact
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: actions/download-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: tj-actions/changed-files
  dependency-version: dbf178ceecb9304128c8e0648591d71208c6e2c9
  dependency-type: direct:production
  dependency-group: gha-all-dependencies
- dependency-name: peter-evans/find-comment
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: peter-evans/create-or-update-comment
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: bridgecrewio/checkov-action
  dependency-version: 12.3068.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-all-dependencies
- dependency-name: github/codeql-action
  dependency-version: 4.31.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: actions/dependency-review-action
  dependency-version: 4.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-all-dependencies
- dependency-name: aws-actions/setup-sam
  dependency-version: c71dd89d980e49367c70391e8ada4353f52f2800
  dependency-type: direct:production
  dependency-group: gha-all-dependencies
- dependency-name: govuk-one-login/devplatform-upload-action
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-all-dependencies
- dependency-name: actions/setup-python
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
- dependency-name: actions/cache
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-all-dependencies
- dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gha-all-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

Author: dependabot[bot]

.github/workflows/call_build-single-api-module.yml

@@ -60,7 +60,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Set up AWS credentials
-        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
+        uses: aws-actions/configure-aws-credentials@00943011d9042930efac3dcd3a170e4273319bc8 # v5.1.0
         with:
           role-to-assume: ${{ inputs.aws_role }}
           aws-region: ${{ inputs.aws_region }}
@@ -72,7 +72,7 @@ jobs:
           distribution: ${{ inputs.java_distribution }}
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4
+        uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v4
         with:
           gradle-version: wrapper
           cache-read-only: true
@@ -219,7 +219,7 @@ jobs:
 
       - name: Upload artifacts
         id: upload-artifacts
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         env:
           MODULE_NAME: ${{ inputs.module_name }}
         with:

.github/workflows/call_create-oidc-promotion-artifact.yml

@@ -39,33 +39,33 @@ jobs:
 
       - name: Download OIDC API code artifact
         id: download_client_registry_api_artifact
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: signed-${{ inputs.oidc_api_module_name }}
           path: ci/terraform/${{ inputs.terraform_directory_name }}/artifacts
 
       - name: Download Client Registry API code artifact
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: signed-${{ inputs.client_registry_api_module_name }}
           path: ci/terraform/${{ inputs.terraform_directory_name }}/artifacts
 
       - name: Download Doc Checking App API code artifact
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: signed-${{ inputs.doc_checking_app_api_module_name }}
           path: ci/terraform/${{ inputs.terraform_directory_name }}/artifacts
 
       - name: Download Frontend API code artifact
         id: download_frontend_api_artifact
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: signed-${{ inputs.frontend_api_module_name }}
           path: ci/terraform/${{ inputs.terraform_directory_name }}/artifacts
 
       - name: Download IPV API code artifact
         id: download_ipv_api_artifact
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           name: signed-${{ inputs.ipv_api_module_name }}
           path: ci/terraform/${{ inputs.terraform_directory_name }}/artifacts
@@ -75,7 +75,7 @@ jobs:
         run: zip -r oidc.zip .
 
       - name: upload promotion_artifact_oidc.zip
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: promotion_artifact_oidc.zip
           path: ci/terraform/oidc.zip

.github/workflows/call_create-shared-promotion-artifact.yml

@@ -16,7 +16,7 @@ jobs:
         run: zip -r shared.zip .
 
       - name: upload promotion_artifact_shared.zip
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: promotion_artifact_shared.zip
           path: ci/terraform/shared.zip

.github/workflows/call_create-simple-module-promotion-artifact.yml

@@ -22,7 +22,7 @@ jobs:
 
       - name: Download ${{ inputs.module_name }} code artifact
         id: download_artifact
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         env:
           MODULE_NAME: ${{ inputs.module_name }}
           TERRAFORM_DIR: ${{ inputs.terraform_directory_name }}
@@ -38,7 +38,7 @@ jobs:
         run: zip -r "$TERRAFORM_DIR.zip" .
 
       - name: upload promotion_artifact_${{ inputs.terraform_directory_name }}
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         env:
           TERRAFORM_DIR: ${{ inputs.terraform_directory_name }}
         with:

.github/workflows/call_get_changed_files.yml

@@ -21,7 +21,7 @@ jobs:
 
       - name: Get changed Java files
         id: changed-java-files
-        uses: tj-actions/changed-files@3b04099b21072562f07469c10deb182b24236ca9 # v45.0.7
+        uses: tj-actions/changed-files@dbf178ceecb9304128c8e0648591d71208c6e2c9 # v45.0.7
         with:
           # If you change the paths here, ensure they are synchronised with the paths in the other jobs.
           # Find these by searching for "Ensure these are synchronized with the paths in the check-changed-files job"
@@ -34,14 +34,14 @@ jobs:
 
       - name: Get changed files in orchestration-alerting folder
         id: changed-orch-alerting-files
-        uses: tj-actions/changed-files@3b04099b21072562f07469c10deb182b24236ca9 # v45.0.7
+        uses: tj-actions/changed-files@dbf178ceecb9304128c8e0648591d71208c6e2c9 # v45.0.7
         with:
           files: |
             orchestration-alerting/**
 
       - name: Find PR comment
         if: github.event_name == 'pull_request'
-        uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3.1.0
+        uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4.0.0
         id: fc
         with:
           issue-number: ${{ github.event.pull_request.number }}
@@ -50,7 +50,7 @@ jobs:
 
       - name: Update java comment to indicate test skipping
         if: github.event_name == 'pull_request' && steps.changed-java-files.outputs.any_changed == 'false'
-        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
+        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
         with:
           comment-id: ${{ steps.fc.outputs.comment-id }}
           issue-number: ${{ github.event.pull_request.number }}
@@ -68,7 +68,7 @@ jobs:
 
       - name: Update java comment to indicate test running
         if: github.event_name == 'pull_request' && steps.changed-java-files.outputs.any_changed == 'true' && steps.fc.outputs.comment-id != 0
-        uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
+        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
         with:
           comment-id: ${{ steps.fc.outputs.comment-id }}
           issue-number: ${{ github.event.pull_request.number }}

.github/workflows/checkov.yml

@@ -39,7 +39,7 @@ jobs:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Checkov GitHub Action
-        uses: bridgecrewio/checkov-action@7bd1adbc0a62c96c5a3a4949b4e701ac76adaf42 # v12.3056.0
+        uses: bridgecrewio/checkov-action@197d53917e0ff43d63111c0808e40b1aaf28ec1c # v12.3068.0
         with:
           directory: ci/terraform/${{ matrix.module }}
           soft_fail: true
@@ -48,7 +48,7 @@ jobs:
           skip_check: CKV_OPENAPI_20,CKV_OPENAPI_4
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.25.12v3
+        uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v3.25.12v3
         with:
           sarif_file: results.sarif
           category: ${{ matrix.module }}
@@ -62,7 +62,7 @@ jobs:
     steps:
       - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Checkov GitHub Action
-        uses: bridgecrewio/checkov-action@7bd1adbc0a62c96c5a3a4949b4e701ac76adaf42 # v12.3056.0
+        uses: bridgecrewio/checkov-action@197d53917e0ff43d63111c0808e40b1aaf28ec1c # v12.3068.0
         with:
           file: template.yaml
           framework: cloudformation
@@ -73,7 +73,7 @@ jobs:
 
       - name: Upload SARIF file
         if: always()
-        uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.25.12v3
+        uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v3.25.12v3
         with:
           sarif_file: results.sarif
           category: orch-sam

.github/workflows/contract-tests.yml

@@ -51,7 +51,7 @@ jobs:
           distribution: "corretto"
 
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4
+        uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v4
         with:
           gradle-version: wrapper
           cache-read-only: false

.github/workflows/dependency-review-on-pr.yml

@@ -17,10 +17,10 @@ jobs:
           java-version: 17
 
       - name: Generate and submit dependency graph
-        uses: gradle/actions/dependency-submission@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4
+        uses: gradle/actions/dependency-submission@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v4
 
       - name: Perform dependency review
-        uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3
+        uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1
         with:
           # These exceptions should be rare and well justified
           # - GHSA-qh8g-58pp-2wxh see https://github.com/govuk-one-login/authentication-api/pull/7105

.github/workflows/dependency-submission.yml

@@ -19,4 +19,4 @@ jobs:
           java-version: 17
 
       - name: Generate and submit dependency graph
-        uses: gradle/actions/dependency-submission@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4
+        uses: gradle/actions/dependency-submission@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v4

.github/workflows/deploy-api-modules-dev.yml

@@ -76,7 +76,7 @@ jobs:
           java-version: ${{ env.JAVA_VERSION}}
           distribution: ${{ env.JAVA_DISTRIBUTION}}
       - name: Set up Gradle
-        uses: gradle/actions/setup-gradle@017a9effdb900e5b5b2fddfb590a105619dca3c3 # v4
+        uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v4
         with:
           gradle-version: wrapper
           cache-read-only: false
@@ -198,14 +198,14 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Set up AWS credentials
-        uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4.3.1
+        uses: aws-actions/configure-aws-credentials@00943011d9042930efac3dcd3a170e4273319bc8 # v5.1.0
         with:
           role-to-assume: ${{ needs.set-up.outputs.promotion_role }}
           aws-region: ${{ needs.set-up.outputs.aws_region }}
 
       - name: Download all promotion artifacts
         id: download_promotion_artifacts
-        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
+        uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
         with:
           path: promotion-artifacts
           pattern: promotion_artifact_*