ci: up actions version (#42044)

47 files changed, 90 insertions, 90 deletions

diff --git a/.github/workflows/add_backport_table.yml b/.github/workflows/add_backport_table.yml
index aff4bd6c13d..ec120a2a42c 100644
--- a/.github/workflows/add_backport_table.yml
+++ b/.github/workflows/add_backport_table.yml
@@ -37,7 +37,7 @@ jobs:
     
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event_name == 'workflow_dispatch' && github.ref || 'main' }}
           fetch-depth: 1
diff --git a/.github/workflows/add_run_tests_table.yml b/.github/workflows/add_run_tests_table.yml
index 694124fe63c..07d481f55f1 100644
--- a/.github/workflows/add_run_tests_table.yml
+++ b/.github/workflows/add_run_tests_table.yml
@@ -33,7 +33,7 @@ jobs:
     
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 1
           sparse-checkout: |
diff --git a/.github/workflows/alert_died_runners.yml b/.github/workflows/alert_died_runners.yml
index 1b8e19ba320..3c897dbcbbc 100644
--- a/.github/workflows/alert_died_runners.yml
+++ b/.github/workflows/alert_died_runners.yml
@@ -13,10 +13,10 @@ jobs:
     
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       
     - name: Set up Python
-      uses: actions/setup-python@v4
+      uses: actions/setup-python@v6
       with:
         python-version: '3.11'
         
diff --git a/.github/workflows/automerge_pr.yaml b/.github/workflows/automerge_pr.yaml
index f9b26fc514d..599e0f0f274 100644
--- a/.github/workflows/automerge_pr.yaml
+++ b/.github/workflows/automerge_pr.yaml
@@ -14,7 +14,7 @@ jobs:
     timeout-minutes: 70
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           sparse-checkout: |
             .github
diff --git a/.github/workflows/build_analytics.yml b/.github/workflows/build_analytics.yml
index f0cc3b6b326..7c2089a049a 100644
--- a/.github/workflows/build_analytics.yml
+++ b/.github/workflows/build_analytics.yml
@@ -33,7 +33,7 @@ jobs:
     runs-on: [ self-hosted, "${{ inputs.runner_label || 'auto-provisioned' }}", "${{ format('build-preset-{0}', inputs.build_preset || 'relwithdebinfo') }}" ]
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ inputs.commit_sha }}
 
diff --git a/.github/workflows/build_and_test_provisioned.yml b/.github/workflows/build_and_test_provisioned.yml
index e03a96b5f37..60731b0c9af 100644
--- a/.github/workflows/build_and_test_provisioned.yml
+++ b/.github/workflows/build_and_test_provisioned.yml
@@ -48,7 +48,7 @@ jobs:
     runs-on: [ self-hosted, "${{ inputs.runner_label }}" ]
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ inputs.checkout_ref }}
     - name: Build
diff --git a/.github/workflows/build_and_test_ya.yml b/.github/workflows/build_and_test_ya.yml
index df756a41f00..9ed5c5df06c 100644
--- a/.github/workflows/build_and_test_ya.yml
+++ b/.github/workflows/build_and_test_ya.yml
@@ -65,7 +65,7 @@ jobs:
     runs-on: [ self-hosted, "${{ inputs.runner_label }}", "${{ inputs.runner_additional_label || inputs.runner_label }}"]
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ inputs.commit_sha }}
 
diff --git a/.github/workflows/build_ydb_dstool.yml b/.github/workflows/build_ydb_dstool.yml
index e2f6c428521..4473aaca05a 100644
--- a/.github/workflows/build_ydb_dstool.yml
+++ b/.github/workflows/build_ydb_dstool.yml
@@ -79,7 +79,7 @@ jobs:
         shell: ${{ matrix.shell }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ inputs.commit_sha }}
 
@@ -99,7 +99,7 @@ jobs:
       run: ./ya make ydb/apps/dstool -r -DUSE_SSE4=no --target-platform ${{ matrix.platform }}
 
     - name: Upload binary to artifact
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@v6
       with:
         name: ${{ matrix.os }}-binary
         path: ydb/apps/dstool/${{ matrix.binary }}
@@ -112,7 +112,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.commit_sha }}
       - name: Get YDB DSTool version from ydb/apps/dstool/version.txt
@@ -139,31 +139,31 @@ jobs:
 
       - name: Copy linux-amd binary
         if: ${{ inputs.build-linux-amd }}
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           name: linux-amd-binary
           path: ${{ steps.getver.outputs.dstool_version }}/linux/amd64/
       - name: Copy linux-arm binary
         if: ${{ inputs.build-linux-arm }}
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           name: linux-arm-binary
           path: ${{ steps.getver.outputs.dstool_version }}/linux/arm64/
       - name: Copy darwin amd64 binary
         if: ${{ inputs.build-darwin-amd }}
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           name: darwin-amd-binary
           path: ${{ steps.getver.outputs.dstool_version }}/darwin/amd64/
       - name: Copy darwin arm64 binary
         if: ${{ inputs.build-darwin-arm }}
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           name: darwin-arm-binary
           path: ${{ steps.getver.outputs.dstool_version }}/darwin/arm64/
       - name: Copy windows-amd binary (unsigned)
         if: ${{ inputs.build-windows-amd }}
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           name: windows-amd-binary
           path: ${{ steps.getver.outputs.dstool_version }}/windows/amd64/unsigned/
diff --git a/.github/workflows/cherry_pick.yml b/.github/workflows/cherry_pick.yml
index 623590cde6f..2947a8aabdb 100644
--- a/.github/workflows/cherry_pick.yml
+++ b/.github/workflows/cherry_pick.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: [self-hosted, tiny-worker]
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 1
           ref: ${{ inputs.commit_sha }}
diff --git a/.github/workflows/cherry_pick_v2.yml b/.github/workflows/cherry_pick_v2.yml
index 418404a564c..d964d67213a 100644
--- a/.github/workflows/cherry_pick_v2.yml
+++ b/.github/workflows/cherry_pick_v2.yml
@@ -33,7 +33,7 @@ jobs:
     runs-on: [self-hosted, tiny-worker]
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 1
           ref: ${{ inputs.script_version_sha }}
diff --git a/.github/workflows/collect_analytics.yml b/.github/workflows/collect_analytics.yml
index 8759f8c89bd..42a20965ae2 100644
--- a/.github/workflows/collect_analytics.yml
+++ b/.github/workflows/collect_analytics.yml
@@ -18,7 +18,7 @@ jobs:
     runs-on: [ self-hosted, auto-provisioned, build-preset-analytic-node]
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ github.ref }}
     - name: Setup ydb access
@@ -40,7 +40,7 @@ jobs:
         branch: [ main ]
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ github.ref }}
     - name: Setup ydb access
diff --git a/.github/workflows/collect_analytics_fast.yml b/.github/workflows/collect_analytics_fast.yml
index 763b7f3ee8b..f441dc44396 100644
--- a/.github/workflows/collect_analytics_fast.yml
+++ b/.github/workflows/collect_analytics_fast.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: [ self-hosted, auto-provisioned, build-preset-analytic-node]
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ inputs.commit_sha }}
     - name: Setup ydb access
diff --git a/.github/workflows/collect_combined_summary.yml b/.github/workflows/collect_combined_summary.yml
index fd83c614b5c..21ef00c1bec 100644
--- a/.github/workflows/collect_combined_summary.yml
+++ b/.github/workflows/collect_combined_summary.yml
@@ -10,10 +10,10 @@ jobs:
     if: always()
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Download all summary artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v6
         with:
           pattern: job-summary-*
           merge-multiple: true
diff --git a/.github/workflows/compare_configs.yml b/.github/workflows/compare_configs.yml
index 39594ba1c07..f17951be3df 100644
--- a/.github/workflows/compare_configs.yml
+++ b/.github/workflows/compare_configs.yml
@@ -23,7 +23,7 @@ jobs:
     runs-on: [ self-hosted, auto-provisioned, build-preset-analytic-node]
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ inputs.commit_sha }}
         fetch-depth: 1
diff --git a/.github/workflows/create_issues_for_muted_tests.yml b/.github/workflows/create_issues_for_muted_tests.yml
index 3bc59d555d7..8bb5d445a6e 100644
--- a/.github/workflows/create_issues_for_muted_tests.yml
+++ b/.github/workflows/create_issues_for_muted_tests.yml
@@ -35,7 +35,7 @@ jobs:
       matrix_build_types: ${{ steps.resolve.outputs.matrix_build_types }}
     steps:
       - name: Checkout config
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ env.WORKFLOW_CHECKOUT_REF }}
 
@@ -81,7 +81,7 @@ jobs:
           echo "BASE_BRANCH=${{ needs.resolve-build-types.outputs.base_branch }}" >> "$GITHUB_ENV"
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
             ref: ${{ env.WORKFLOW_CHECKOUT_REF }}
 
@@ -119,7 +119,7 @@ jobs:
         run: python .github/scripts/create_or_update_pr.py append_pr_body --pr_number=${{ github.event.pull_request.number || github.event.inputs.pr_number  }} --body=${{ steps.create_issues.outputs.created_issues_file }}
 
       - name: Comment PR
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ env.GH_TOKEN }}
           script: |
@@ -162,7 +162,7 @@ jobs:
           echo "BASE_BRANCH=${{ needs.resolve-build-types.outputs.base_branch }}" >> "$GITHUB_ENV"
 
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ env.WORKFLOW_CHECKOUT_REF }}
 
diff --git a/.github/workflows/create_vm_image.yaml b/.github/workflows/create_vm_image.yaml
index 0048d33231b..cf177329b4a 100644
--- a/.github/workflows/create_vm_image.yaml
+++ b/.github/workflows/create_vm_image.yaml
@@ -8,7 +8,7 @@ jobs:
     permissions: {}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           sparse-checkout: |
            .github
diff --git a/.github/workflows/docker_publish.yml b/.github/workflows/docker_publish.yml
index 47bc8b7d9e8..5ce533eb771 100644
--- a/.github/workflows/docker_publish.yml
+++ b/.github/workflows/docker_publish.yml
@@ -35,7 +35,7 @@ jobs:
     runs-on: [self-hosted, auto-provisioned]
     steps:
       - name: Checkout .github
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.dockerfile_branch || 'main' }}
           path: main
@@ -43,7 +43,7 @@ jobs:
             .github
 
       - name: Checkout repository for build ydbd
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.ydbd_git_ref || 'main' }}
           path: ydbd
@@ -56,36 +56,36 @@ jobs:
           echo "SHA=$(git rev-parse HEAD)" >> $GITHUB_OUTPUT
 
       - name: Checkout repository for build CLI
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.cli_git_ref || 'main' }}
           path: cli
 
       - name: Checkout repository for build local_ydb binary
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.local_ydb_git_ref || 'main' }}
           path: local_ydb
 
       - name: Set up Docker buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v4
 
       - name: Log in to the Container registry
-        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Log in to the Docker Hub
-        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
+        uses: docker/login-action@v4
         with:
           username: ${{ vars.DOCKER_HUB_USER_NAME }}
           password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@v4
+        uses: docker/metadata-action@v6
         with:
           images: |
             ghcr.io/${{ github.repository_owner }}/local-ydb
@@ -98,7 +98,7 @@ jobs:
             type=raw,value=${{ inputs.image_tag || 'trunk' }}
 
       - name: Build docker image
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: main/.github/docker/Dockerfile
@@ -124,7 +124,7 @@ jobs:
           docker stop local-ydb-test || true
 
       - name: Push docker image
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v7
         with:
           context: .
           file: main/.github/docker/Dockerfile
diff --git a/.github/workflows/docs_assign_review.yaml b/.github/workflows/docs_assign_review.yaml
index 97b3e7a2c41..e7f7d675296 100644
--- a/.github/workflows/docs_assign_review.yaml
+++ b/.github/workflows/docs_assign_review.yaml
@@ -10,7 +10,7 @@ jobs:
     if: contains(github.event.pull_request.body, '* Documentation') && !contains(github.event.pull_request.body, '* New feature')
     steps:
       - name: Assign a random documentation reviewer, excluding the PR author and busy members
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.YDBOT_TOKEN }}
           script: |
diff --git a/.github/workflows/docs_backport.yaml b/.github/workflows/docs_backport.yaml
index 1b3146f3b83..1168d874918 100644
--- a/.github/workflows/docs_backport.yaml
+++ b/.github/workflows/docs_backport.yaml
@@ -27,7 +27,7 @@ jobs:
         startsWith(github.event.comment.body, '/backport')
       )
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Create backport pull requests
         uses: korthout/backport-action@v3
         with:
diff --git a/.github/workflows/docs_build.yaml b/.github/workflows/docs_build.yaml
index 7218a6bdae8..fdb5b170185 100644
--- a/.github/workflows/docs_build.yaml
+++ b/.github/workflows/docs_build.yaml
@@ -20,7 +20,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Add documentation label
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             github.rest.issues.addLabels({
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event_name == 'workflow_dispatch' && format('refs/pull/{0}/head', inputs.pull_number) || github.event.pull_request.head.sha }}
           
diff --git a/.github/workflows/docs_notify_assignees.yaml b/.github/workflows/docs_notify_assignees.yaml
index b868420fead..f9ac92dbd73 100644
--- a/.github/workflows/docs_notify_assignees.yaml
+++ b/.github/workflows/docs_notify_assignees.yaml
@@ -20,7 +20,7 @@ jobs:
     env:
       GITHUB_TOKEN: ${{ secrets.YDBOT_TOKEN }}
     steps:
-      - uses: actions/github-script@v7
+      - uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.YDBOT_TOKEN }}
           script: |
diff --git a/.github/workflows/docs_pr_nudge.yaml b/.github/workflows/docs_pr_nudge.yaml
index 759835ed97f..c0153c85ecc 100644
--- a/.github/workflows/docs_pr_nudge.yaml
+++ b/.github/workflows/docs_pr_nudge.yaml
@@ -25,7 +25,7 @@ jobs:
       REVIEWER_NUDGE_COOLDOWN_HOURS: 24           # min hours between reviewer-nudges
       AUTHOR_NUDGE_COOLDOWN_DAYS: 7               # min days between author-nudges
     steps:
-      - uses: actions/github-script@v7
+      - uses: actions/github-script@v8
         
         with:
           github-token: ${{ secrets.YDBOT_TOKEN }}
diff --git a/.github/workflows/docs_release.yaml b/.github/workflows/docs_release.yaml
index 814721dc031..a250b5d200b 100644
--- a/.github/workflows/docs_release.yaml
+++ b/.github/workflows/docs_release.yaml
@@ -18,7 +18,7 @@ jobs:
     permissions: write-all
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Build
         uses: diplodoc-platform/docs-build-action@v3
diff --git a/.github/workflows/embedded_ui_refresh.yaml b/.github/workflows/embedded_ui_refresh.yaml
index 94d8b5e41d6..9187eea0beb 100644
--- a/.github/workflows/embedded_ui_refresh.yaml
+++ b/.github/workflows/embedded_ui_refresh.yaml
@@ -30,7 +30,7 @@ jobs:
       TAG_NAME: ${{ github.event.inputs && github.event.inputs.tag_name || github.event.client_payload.tag_name }}
       TEMP_ASSET_DIR: /tmp/asset
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v5
       - name: Asset Download
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -65,7 +65,7 @@ jobs:
           $INDENTATION)
           $INDENTATION$END_POINTER/s" ya.make
       - name: Pull Request
-        uses: peter-evans/create-pull-request@v5
+        uses: peter-evans/create-pull-request@v8
         with:
           token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
           commit-message: "build: refresh Embedded UI (${{ env.TAG_NAME }})"
diff --git a/.github/workflows/label_external_issues.yml b/.github/workflows/label_external_issues.yml
index 0d60112bec7..fc26b6d9ae2 100644
--- a/.github/workflows/label_external_issues.yml
+++ b/.github/workflows/label_external_issues.yml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: add external label
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
           script: |
diff --git a/.github/workflows/monitoring_queries.yml b/.github/workflows/monitoring_queries.yml
index aad28da3f6c..eddcd9a5605 100644
--- a/.github/workflows/monitoring_queries.yml
+++ b/.github/workflows/monitoring_queries.yml
@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ inputs.commit_sha }}
     - name: Setup ydb access
diff --git a/.github/workflows/nightly_build.yml b/.github/workflows/nightly_build.yml
index 68390b85444..5e3d120e5d1 100644
--- a/.github/workflows/nightly_build.yml
+++ b/.github/workflows/nightly_build.yml
@@ -19,7 +19,7 @@ jobs:
       branches: ${{ steps.set-branches.outputs.branches }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         sparse-checkout: |
           .github/config
@@ -43,7 +43,7 @@ jobs:
     name: Build and test ${{ matrix.build_preset }} on ${{ matrix.branch }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ matrix.branch }}
         fetch-depth: 2
diff --git a/.github/workflows/postcommit_asan.yml b/.github/workflows/postcommit_asan.yml
index 1f8dd5139c1..a3a608cbb2b 100644
--- a/.github/workflows/postcommit_asan.yml
+++ b/.github/workflows/postcommit_asan.yml
@@ -15,7 +15,7 @@ jobs:
     name: Build and test release-asan
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         fetch-depth: 2
     - name: Setup ydb access
diff --git a/.github/workflows/postcommit_relwithdebinfo.yml b/.github/workflows/postcommit_relwithdebinfo.yml
index 240ae3143d0..bb304589a6b 100644
--- a/.github/workflows/postcommit_relwithdebinfo.yml
+++ b/.github/workflows/postcommit_relwithdebinfo.yml
@@ -14,7 +14,7 @@ jobs:
     name: Build and test relwithdebinfo
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         fetch-depth: 2
     - name: Setup ydb access
diff --git a/.github/workflows/pr_check.yml b/.github/workflows/pr_check.yml
index 148c395359f..4339698f389 100644
--- a/.github/workflows/pr_check.yml
+++ b/.github/workflows/pr_check.yml
@@ -40,7 +40,7 @@ jobs:
 
       - name: Check if running tests is allowed
         id: check-ownership-membership
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.GH_PERSONAL_ACCESS_TOKEN }}
           script: |
@@ -91,7 +91,7 @@ jobs:
       - name: comment-if-waiting-on-ok
         if: steps.check-ownership-membership.outputs.result == 'false' &&
             github.event.action == 'opened'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             let externalContributorLabel = 'external';
@@ -110,7 +110,7 @@ jobs:
             });
 
       - name: cleanup-test-label
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             let labelsToRemove = ['ok-to-test', 'rebase-and-check'];
@@ -136,7 +136,7 @@ jobs:
       - name: check is mergeable
         id: check-is-mergeable
         if: steps.check-ownership-membership.outputs.result == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           result-encoding: string
           script: |
@@ -230,7 +230,7 @@ jobs:
     name: Build and test ${{ matrix.build_preset }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ needs.check-running-allowed.outputs.commit_sha }}
         fetch-depth: 2
diff --git a/.github/workflows/pr_labels.yaml b/.github/workflows/pr_labels.yaml
index 2da62255728..eb54cde7cce 100644
--- a/.github/workflows/pr_labels.yaml
+++ b/.github/workflows/pr_labels.yaml
@@ -16,7 +16,7 @@ jobs:
     steps:
       - name: Update PR labels
         id: update-pr-labels
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/prestable_sync.yml b/.github/workflows/prestable_sync.yml
index db926b1afac..c019bf13510 100644
--- a/.github/workflows/prestable_sync.yml
+++ b/.github/workflows/prestable_sync.yml
@@ -20,7 +20,7 @@ jobs:
             label: sync-prestable
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
           sparse-checkout: |
diff --git a/.github/workflows/prewarm-ccache.yml b/.github/workflows/prewarm-ccache.yml
index 080849d97ab..088b802ea23 100644
--- a/.github/workflows/prewarm-ccache.yml
+++ b/.github/workflows/prewarm-ccache.yml
@@ -13,7 +13,7 @@ jobs:
         version: ["ubuntu-2204", "ubuntu-2004", "ubuntu-1804"]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
       - name: build
         shell: bash
         run: |
diff --git a/.github/workflows/prewarm-debug.yaml b/.github/workflows/prewarm-debug.yaml
index 070bc2c96dc..136e25a7f73 100644
--- a/.github/workflows/prewarm-debug.yaml
+++ b/.github/workflows/prewarm-debug.yaml
@@ -13,7 +13,7 @@ jobs:
     name: Build and test ${{ matrix.build_preset }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ needs.check-running-allowed.outputs.commit_sha }}
         fetch-depth: 2
diff --git a/.github/workflows/rightlib_sync.yml b/.github/workflows/rightlib_sync.yml
index 15ea49e4291..e2689ba69ac 100644
--- a/.github/workflows/rightlib_sync.yml
+++ b/.github/workflows/rightlib_sync.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           fetch-depth: 0
           sparse-checkout: |
diff --git a/.github/workflows/run_tests.yml b/.github/workflows/run_tests.yml
index 5e1be8c0778..5b52dc5157f 100644
--- a/.github/workflows/run_tests.yml
+++ b/.github/workflows/run_tests.yml
@@ -105,7 +105,7 @@ jobs:
       pr_number_map: ${{ steps.set-branches.outputs.pr_number_map }}
     steps:
       - name: Checkout ${{ matrix.branch }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           sparse-checkout: |
             .github/config
@@ -299,7 +299,7 @@ jobs:
           fi
 
       - name: Checkout ${{ matrix.branch }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ matrix.branch }}
 
diff --git a/.github/workflows/slo_cpp_sdk.yml b/.github/workflows/slo_cpp_sdk.yml
index 611e8e7a3c4..e0d1f72411b 100644
--- a/.github/workflows/slo_cpp_sdk.yml
+++ b/.github/workflows/slo_cpp_sdk.yml
@@ -273,7 +273,7 @@ jobs:
           docker logs ydb-app-baseline > baseline.log 2>&1 || echo "No baseline container"
 
       - if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: ${{matrix.workload}}-slo-cpp-sdk-logs
           path: |
diff --git a/.github/workflows/sync_github_runner.yaml b/.github/workflows/sync_github_runner.yaml
index 7a8632ffeb3..a08b6c2e3bb 100644
--- a/.github/workflows/sync_github_runner.yaml
+++ b/.github/workflows/sync_github_runner.yaml
@@ -10,7 +10,7 @@ jobs:
     permissions: {}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           sparse-checkout: |
             .github
diff --git a/.github/workflows/telegram_scheduled_notifications.yml b/.github/workflows/telegram_scheduled_notifications.yml
index 3cd8f037ae1..66b0386a0d9 100644
--- a/.github/workflows/telegram_scheduled_notifications.yml
+++ b/.github/workflows/telegram_scheduled_notifications.yml
@@ -37,10 +37,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v6
         with:
           python-version: '3.11'
 
@@ -66,7 +66,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup YDB access
         uses: ./.github/actions/setup_ci_ydb_service_account_key_file_credentials
diff --git a/.github/workflows/update_changelog.yml b/.github/workflows/update_changelog.yml
index 00665e97996..1802685b3a6 100644
--- a/.github/workflows/update_changelog.yml
+++ b/.github/workflows/update_changelog.yml
@@ -31,7 +31,7 @@ jobs:
       prs: ${{ steps.pr-list.outputs.prs }}
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Get merged PRs
         id: pr-list
@@ -69,7 +69,7 @@ jobs:
           cat prs.json
 
       - name: Upload PRs JSON
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: prs-json
           path: prs.json
@@ -80,7 +80,7 @@ jobs:
 
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Update Changelog
         uses: ./.github/actions/update_changelog 
diff --git a/.github/workflows/update_dstool_package.yaml b/.github/workflows/update_dstool_package.yaml
index 30de39b4be6..65a727af748 100644
--- a/.github/workflows/update_dstool_package.yaml
+++ b/.github/workflows/update_dstool_package.yaml
@@ -17,7 +17,7 @@ jobs:
 
     steps:
       - name: Set up Python
-        uses: actions/setup-python@v4
+        uses: actions/setup-python@v6
         with:
           python-version: '3.8.12'
 
@@ -28,7 +28,7 @@ jobs:
           pip install build twine grpcio-tools setuptools
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ inputs.commit_sha }}
 
@@ -40,4 +40,4 @@ jobs:
           python -m build
 
       - name: Upload package to PyPI
-        uses: pypa/gh-action-pypi-publish@release/v1.8
+        uses: pypa/gh-action-pypi-publish@release/v1
diff --git a/.github/workflows/update_muted_ya.yml b/.github/workflows/update_muted_ya.yml
index 3890476d64b..2ee891d2f96 100644
--- a/.github/workflows/update_muted_ya.yml
+++ b/.github/workflows/update_muted_ya.yml
@@ -32,7 +32,7 @@ jobs:
       matrix_include: ${{ steps.set-mute-matrix.outputs.matrix_include }}
     steps:
       - name: Checkout branch list and mute files
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ env.WORKFLOW_CHECKOUT_REF }}
           path: config-repo
@@ -56,7 +56,7 @@ jobs:
     runs-on: [ self-hosted, auto-provisioned, build-preset-analytic-node]
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ env.WORKFLOW_CHECKOUT_REF }}
 
@@ -95,7 +95,7 @@ jobs:
         include: ${{ fromJson(needs.setup.outputs.matrix_include) }}
     steps:
       - name: Checkout workflow branch
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           token: ${{ secrets.YDBOT_TOKEN }}
           ref: ${{ env.WORKFLOW_CHECKOUT_REF }}
@@ -246,7 +246,7 @@ jobs:
 
       - name: Upload all generated files as artifacts
         if: steps.changes_check.outputs.changes == 'true'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: muted-tests-all-files-${{ env.BASE_BRANCH }}-${{ env.BUILD_TYPE }}
           path: |
@@ -318,7 +318,7 @@ jobs:
 
       - name: Add comment, reviewers and labels
         if: steps.changes_check.outputs.changes == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         env:
           LABELS: ${{ env.LABELS }}
           REVIEWERS: ${{ env.REVIEWERS }}
@@ -385,7 +385,7 @@ jobs:
           
       - name: Enable auto-merge (squash)
         if: steps.changes_check.outputs.changes == 'true'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.YDBOT_TOKEN }}
           script: |
diff --git a/.github/workflows/validate_pr_description.yml b/.github/workflows/validate_pr_description.yml
index e56bccead4f..46801e131cd 100644
--- a/.github/workflows/validate_pr_description.yml
+++ b/.github/workflows/validate_pr_description.yml
@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Check out the repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: main
 
diff --git a/.github/workflows/weekly_analytic.yml b/.github/workflows/weekly_analytic.yml
index 1c4cb890ebb..a034d3227e7 100644
--- a/.github/workflows/weekly_analytic.yml
+++ b/.github/workflows/weekly_analytic.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: [ self-hosted ]
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         ref: ${{ github.ref }}
     - name: Setup ydb access
diff --git a/.github/workflows/weekly_update_changelog.yml b/.github/workflows/weekly_update_changelog.yml
index eba8a46bd54..8ed06ef89dc 100644
--- a/.github/workflows/weekly_update_changelog.yml
+++ b/.github/workflows/weekly_update_changelog.yml
@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         
       - name: List 'main' and 'stable-*' branches
         id: branch-list
@@ -42,7 +42,7 @@ jobs:
       base_branch: ${{ steps.branch-name.outputs.base_branch }}
     steps:
       - name: Check out repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
            ref: ${{ github.ref }}
            
@@ -71,7 +71,7 @@ jobs:
           cat prs-${{ matrix.branch }}.json
 
       - name: Upload PRs JSON
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: prs-json-${{ matrix.branch }}
           path: prs-${{ matrix.branch }}.json
diff --git a/.github/workflows/ydbdoc-review.yml b/.github/workflows/ydbdoc-review.yml
index 7ad75e23cbe..98be31c89af 100644
--- a/.github/workflows/ydbdoc-review.yml
+++ b/.github/workflows/ydbdoc-review.yml
@@ -22,7 +22,7 @@ jobs:
       cancel-in-progress: true
     steps:
       - name: Checkout PR head
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0
diff --git a/.github/workflows/ydbdoc-verify.yml b/.github/workflows/ydbdoc-verify.yml
index 04f6b5ff11a..488a774a8b9 100644
--- a/.github/workflows/ydbdoc-verify.yml
+++ b/.github/workflows/ydbdoc-verify.yml
@@ -22,7 +22,7 @@ jobs:
       cancel-in-progress: true
     steps:
       - name: Checkout PR head
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0