From ba5fbfeca392cfdcaaea26b1cbf2d882e9eec239 Mon Sep 17 00:00:00 2001
From: Joao Matos <joao@tritao.eu>
Date: Sat, 8 Aug 2026 21:54:54 +0100
Subject: [PATCH] ci: modernize workflow infrastructure

---
 .github/workflows/codeql.yml                  |  7 +++---
 .../continuous-integration-workflow.yml       | 23 ++++++++++++++-----
 .../workflows/cross-build-arch-workflow.yml   |  6 ++---
 .github/workflows/documentation-workflow.yml  |  2 +-
 4 files changed, 25 insertions(+), 13 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 88577c07df9..55a47c7e3f7 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -25,14 +25,15 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
       with:
         submodules: recursive
 
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@v4
       with:
         languages: c-cpp
+        build-mode: manual
         config: |
           #disable-default-queries: true
           #queries:
@@ -62,6 +63,6 @@ jobs:
       run: cmake --build cmake_build_dir --target all --config Release -- -j4
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@v4
       with:
         category: "/language:c-cpp"
diff --git a/.github/workflows/continuous-integration-workflow.yml b/.github/workflows/continuous-integration-workflow.yml
index 1df24a50a70..b0ea29fd663 100644
--- a/.github/workflows/continuous-integration-workflow.yml
+++ b/.github/workflows/continuous-integration-workflow.yml
@@ -8,12 +8,23 @@ on:
   #  branches: [ master ]
 
 jobs:
+  workflow-lint:
+    name: Workflow lint
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v6
+      - name: Run actionlint
+        uses: docker://rhysd/actionlint:1.7.12
+
   ubuntu-build:
     name: Ubuntu Build
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           submodules: recursive
       - name: Create build directory and run CMake
@@ -30,7 +41,7 @@ jobs:
         run:  ctest -C Release -VV
         working-directory: cmake_build_dir
       - name: Create Artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: Ubuntu-Artifacts
           path: cmake_install_dir/
@@ -41,7 +52,7 @@ jobs:
     runs-on: windows-2022
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           submodules: recursive
       - name: Create build directory and run CMake
@@ -54,7 +65,7 @@ jobs:
         run:  ctest -C Release -VV
         working-directory: cmake_build_dir
       - name: Create Artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: Windows-Artifacts
           path: cmake_install_dir/
@@ -65,7 +76,7 @@ jobs:
     runs-on: macos-14
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           submodules: recursive
       - name: Create build directory and run CMake
@@ -77,7 +88,7 @@ jobs:
         run:  ctest -C Release -VV
         working-directory: cmake_build_dir
       - name: Create Artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: MacOS-Artifacts
           path: cmake_install_dir/
diff --git a/.github/workflows/cross-build-arch-workflow.yml b/.github/workflows/cross-build-arch-workflow.yml
index e9e713d000a..f9e19d3e5e8 100644
--- a/.github/workflows/cross-build-arch-workflow.yml
+++ b/.github/workflows/cross-build-arch-workflow.yml
@@ -10,7 +10,7 @@ on:
 jobs:
   cross-build:
     # The host should always be linux
-    runs-on: ubuntu-18.04
+    runs-on: ubuntu-22.04
     name: Build on ${{ matrix.distro }} ${{ matrix.arch }}
 
     # Run steps on a matrix of 5 arch/distro combinations
@@ -30,7 +30,7 @@ jobs:
           #  distro: buster
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v6
       - name: Checkout submodules
         run: git submodule update --init --recursive
       - uses: uraimo/run-on-arch-action@v2.0.7
@@ -91,7 +91,7 @@ jobs:
       - name: Create Artifacts
         # Items placed in /cmake_install_dir in the container will be in
         # ${PWD}/cmake_install_dir on the host.
-        uses: actions/upload-artifact@v1
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.distro }}_${{ matrix.arch }}-Artifacts
           path: cmake_install_dir/
diff --git a/.github/workflows/documentation-workflow.yml b/.github/workflows/documentation-workflow.yml
index 21216922a0c..128d6f38af5 100644
--- a/.github/workflows/documentation-workflow.yml
+++ b/.github/workflows/documentation-workflow.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           submodules: recursive
       - name: Create build directory and run CMake