Upgrade GitHub Actions

[cclauss]

https://github.com/actions/checkout/releases: 6
https://github.com/actions/upload-artifact/releases: 5
https://github.com/svenstaro/upload-release-action/releases: 2

https://github.com/actions/cache/releases: 1
https://github.com/actions/setup-python/releases: 1
https://github.com/anthropics/claude-code-base-action/releases: 1
https://github.com/astral-sh/setup-uv/releases: 1
https://github.com/aws-actions/configure-aws-credentials/releases: 1
https://github.com/docker/login-action/releases: 1
https://github.com/docker/setup-buildx-action/releases: 1
https://github.com/docker/setup-qemu-action/releases: 1
https://github.com/jlumbroso/free-disk-space/releases: 1
https://github.com/oven-sh/setup-bun/releases: 1

This pull request could be automated via Dependabot, etc.

Summary by Sourcery

Update GitHub Actions workflows to use newer versions of core actions and tooling.

Build:

• Bump actions/checkout to v6 across all workflows.
• Upgrade actions/setup-python to v6 and astral-sh/setup-uv to v8 in test and deploy workflows.
• Update actions/upload-artifact to v7 wherever artifacts are published.
• Upgrade docker/setup-qemu-action to v4, docker/setup-buildx-action to v4, and docker/login-action to v4 in container build jobs.
• Bump actions/cache to v5 for Docker layer caching.
• Update aws-actions/configure-aws-credentials to v6 in release workflows.

CI:

• Standardize checkout version to v6 in duplicate issue detection and submodule sync workflows.

---

Note

Low Risk
Low risk version bumps in GitHub Actions workflows, but CI/build/deploy behavior could change subtly due to upstream action updates.

Overview
Updates GitHub Actions workflows to newer major versions of core actions used across CI and release automation.

In test-and-deploy.yml, bumps actions/checkout, actions/setup-python, astral-sh/setup-uv, actions/upload-artifact, actions/cache, and Docker setup/login actions, plus aws-actions/configure-aws-credentials, affecting test runs, Docker build/push, artifact uploads, and release uploads. Similar actions/checkout bump is applied to the duplicate issue detection and submodule sync workflows.

^{Reviewed by Cursor Bugbot for commit c3b3441. Bugbot is set up for automated code reviews on this repo. Configure here.}

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This PR updates several GitHub Actions used in the CI/CD workflows to newer major versions, keeping workflows functionally equivalent while modernizing the underlying action implementations.

File-Level Changes

Change	Details	Files
Upgrade GitHub Actions versions in test-and-deploy workflow while preserving existing behavior.	Bump actions/checkout from v4 to v6 across all jobs using it (test, deploy, duplicate detection, submodule sync). Bump actions/setup-python from v5 to v6 for Python environment setup in tests. Bump astral-sh/setup-uv from v6 to v8 for installing uv in the test job. Bump actions/upload-artifact from v4 to v7 for coverage and build artifact uploads in all relevant jobs. Bump docker/setup-qemu-action from v3 to v4 and docker/setup-buildx-action from v3 to v4 in the Docker build job. Bump actions/cache from v4 to v5 for Docker layer caching. Bump docker/login-action from v3 to v4 for DockerHub authentication in release builds. Bump aws-actions/configure-aws-credentials from v4 to v6 for AWS credential configuration in tagged releases.	.github/workflows/test-and-deploy.yml
Align auxiliary workflows with latest checkout action.	Update actions/checkout from v4 to v6 in duplicate-issue-detection workflow. Update actions/checkout from v4 to v6 in sync-submodules workflow.	.github/workflows/duplicate-issue-detection.yml .github/workflows/sync-submodules.yml

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[sourcery-ai]

Hey - I've reviewed your changes and they look great!

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[CLAassistant]

All committers have signed the CLA.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 2d2fe99. Configure here.}