Update action versions (#3867)

Fixes #3866

Author: ocelotl

.github/workflows/backport.yml

@@ -16,7 +16,7 @@ jobs:
             exit 1
           fi
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # history is needed to run git cherry-pick below
           fetch-depth: 0

.github/workflows/benchmarks.yml

@@ -18,17 +18,17 @@ jobs:
         os: [ubuntu-20.04, windows-2019]
     steps:
     - name: Checkout Core Repo @ SHA - ${{ github.sha }}
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
     - name: Set up Python ${{ env[matrix.python-version] }}
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ env[matrix.python-version] }}
         architecture: 'x64'
     - name: Install tox
       run: pip install tox
     - name: Cache tox environment
       # Preserves .tox directory between runs for faster installs
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: |
           .tox

.github/workflows/changelog.yml

@@ -18,7 +18,7 @@ jobs:
       && github.actor != 'opentelemetrybot'
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
 
       - name: Check for CHANGELOG changes
         run: |
@@ -33,4 +33,4 @@ jobs:
             echo "No CHANGELOG was modified."
             echo "Please add a CHANGELOG entry, or add the \"Skip Changelog\" label if not required."
             false
-          fi
+          fi

.github/workflows/check-links.yml

@@ -13,7 +13,7 @@ jobs:
       md: ${{ steps.changes.outputs.md }}
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Get changed files
@@ -26,7 +26,7 @@ jobs:
     if: ${{needs.changedfiles.outputs.md}}
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
@@ -39,4 +39,4 @@ jobs:
             --verbose \
             --config .github/workflows/check_links_config.json \
             ${{needs.changedfiles.outputs.md}} \
-            || { echo "Check that anchor links are lowercase"; exit 1; }
+            || { echo "Check that anchor links are lowercase"; exit 1; }

.github/workflows/codeql-analysis.yml

@@ -20,16 +20,16 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v1
+        uses: github/codeql-action/init@v3
         with:
           languages: python
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v1
+        uses: github/codeql-action/autobuild@v3
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v1
+        uses: github/codeql-action/analyze@v3

.github/workflows/prepare-patch-release.yml

@@ -6,7 +6,7 @@ jobs:
   prepare-patch-release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - run: |
           if [[ ! $GITHUB_REF_NAME =~ ^release/v[0-9]+\.[0-9]+\.x-0\.[0-9]+bx$ ]]; then

.github/workflows/prepare-release-branch.yml

@@ -10,7 +10,7 @@ jobs:
   prereqs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Verify prerequisites
         env:
@@ -39,7 +39,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: prereqs
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Create release branch
         env:
@@ -103,7 +103,7 @@ jobs:
     runs-on: ubuntu-latest
     needs: prereqs
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Set environment variables
         env:

.github/workflows/public-api-check.yml

@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout the repo
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
@@ -29,7 +29,7 @@ jobs:
         run: git checkout ${{ github.event.pull_request.head.sha }}
 
       - name: Set up Python
-        uses: actions/setup-python@v2
+        uses: actions/setup-python@v5
         with:
           python-version: '3.10'
 

.github/workflows/release.yml

@@ -12,7 +12,7 @@ jobs:
             exit 1
           fi
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Set environment variables
         run: |
@@ -56,15 +56,15 @@ jobs:
 
       # check out main branch to verify there won't be problems with merging the change log
       # at the end of this workflow
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           ref: main
 
         # back to the release branch
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
         # next few steps publish to pypi
-      - uses: actions/setup-python@v1
+      - uses: actions/setup-python@v5
         with:
           python-version: '3.8'
 
@@ -127,7 +127,7 @@ jobs:
                             --discussion-category announcements \
                             v$STABLE_VERSION
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
         with:
           # the step below is creating a pull request against main
           ref: main

.github/workflows/test.yml

@@ -12,7 +12,7 @@ env:
   # changes.
   CONTRIB_REPO_SHA: 9ce1c26d2732dfbdadbb492fc38c562dcd08ed2e
   # This is needed because we do not clone the core repo in contrib builds anymore.
-  # When running contrib builds as part of core builds, we use actions/checkout@v2 which
+  # When running contrib builds as part of core builds, we use actions/checkout@v4 which
   # does not set an environment variable (simply just runs tox), which is different when
   # contrib builds are run directly from contrib (since test.yml is executed, which sets CORE_REPO_SHA)
   # The solution is to include CORE_REPO_SHA as part of THIS environment so it can be accessed
@@ -67,17 +67,17 @@ jobs:
 
     steps:
     - name: Checkout Core Repo @ SHA - ${{ github.sha }}
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
     - name: Set up Python ${{ env[matrix.python-version] }}
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ env[matrix.python-version] }}
         architecture: 'x64'
     - name: Install tox
       run: pip install tox
     - name: Cache tox environment
         # Preserves .tox directory between runs for faster installs
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: |
           .tox
@@ -100,17 +100,17 @@ jobs:
     runs-on: ubuntu-20.04
     steps:
     - name: Checkout Core Repo @ SHA - ${{ github.sha }}
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
     - name: Set up Python
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v5
       with:
         python-version: '3.10'
         architecture: 'x64'
     - name: Install tox
       run: pip install tox
     - name: Cache tox environment
         # Preserves .tox directory between runs for faster installs
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: |
           .tox
@@ -183,25 +183,25 @@ jobs:
         os: [ubuntu-20.04]
     steps:
     - name: Checkout Contrib Repo @ SHA - ${{ env.CONTRIB_REPO_SHA }}
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
       with:
         repository: open-telemetry/opentelemetry-python-contrib
         ref: ${{ env.CONTRIB_REPO_SHA }}
     - name: Checkout Core Repo @ SHA ${{ github.sha }}
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
       with:
         repository: open-telemetry/opentelemetry-python
         path: opentelemetry-python-core
     - name: Set up Python ${{ env[matrix.python-version] }}
-      uses: actions/setup-python@v2
+      uses: actions/setup-python@v5
       with:
         python-version: ${{ env[matrix.python-version] }}
         architecture: 'x64'
     - name: Install tox
       run: pip install tox
     - name: Cache tox environment
         # Preserves .tox directory between runs for faster installs
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: |
           .tox