update workflows

[MBR-COG]

What type of PR is this? (check all applicable)

• Refactor
• Feature
• Bug Fix
• Optimization
• Documentation Update

Description

Please replace this line with a brief description of the changes made.

Related Tickets & Documents

• Ticket Link
• Related Issue #
• Closes #

QA Instructions, Screenshots, Recordings

Please replace this line with instructions on how to test your changes, a note
on the devices and browsers this has been tested on, as well as any relevant
images for UI changes.

Added/updated tests?

We encourage you to keep the code coverage percentage at 80% and above. Please refer to the Digital Land Testing Guidance for more information.

• Yes
• No, and this is why: please replace this line with details on why tests
  have not been included
• I need help with writing tests

[optional] Are there any post deployment tasks we need to perform?

[optional] Are there any dependencies on other PRs or Work?

Summary by CodeRabbit

• Chores
  • Updated continuous integration and deployment pipeline dependencies to latest versions for improved stability and security.

[coderabbitai]

Walkthrough

GitHub Actions dependencies are updated to newer versions across two workflow files. actions/checkout is bumped from v4 to v6 in publish and test workflows. AWS credential actions are upgraded from v1-based versions to v6, and actions/setup-python is upgraded from v4 to v6 in the test processor job. actions/github-script is upgraded from v6 to v8 in the publish environment detection job.

Changes

GitHub Actions dependency upgrades

Layer / File(s)	Summary
Publish workflow action upgrades .github/workflows/publish.yml	actions/github-script upgraded v6→v8, actions/checkout v4→v6 in both publish jobs, and aws-actions/configure-aws-credentials v1-node16/v1→v6 across four AWS credential steps (request API and request processor jobs, each with two AWS regions).
Test workflow action upgrades .github/workflows/test.yml	actions/checkout upgraded v4→v6 in both test jobs, and actions/setup-python upgraded v4→v6 for Python 3.10 setup in the request processor job.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested reviewers

• gibahjoe

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'update workflows' is vague and generic, using non-descriptive language that does not convey specific information about the actual changes made to the workflow files.	Consider using a more descriptive title such as 'Update GitHub Actions versions in CI/CD workflows' or 'Bump actions/checkout and related dependencies in publish and test workflows' to better reflect the specific changes.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feature/update-workflow-actions

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 3

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In @.github/workflows/publish.yml:
- Line 19: The workflow currently uses "uses: actions/github-script@v8", which
requires Node.js 24 and Actions Runner >= v2.327.1; verify that this upgrade is
intended and compatible with your environment by (1) confirming self-hosted
runners are updated to v2.327.1+ or switching to GitHub-hosted runners that
include Node.js 24, (2) running CI locally or in a test branch to ensure any
scripts that rely on Node.js 20 still work, and (3) if you cannot guarantee
Node.js 24 or runner versions, change the workflow to use a compatible version
such as "actions/github-script@v7" or pin a supported Node.js runtime via
actions/setup-node before invoking the script.
- Line 43: Confirm and update both occurrences of actions/checkout to use
actions/checkout@v6 and explicitly set the persist-credentials option to the
intended value (e.g., persist-credentials: true or false) to avoid relying on
v6's changed credential storage behavior; if your workflow uses Docker container
actions add a short runtime check step that prints the runner version (runner.os
and runner.version) or document the requirement that the Actions Runner must be
>= v2.329.0 so CI doesn't silently fail.

In @.github/workflows/test.yml:
- Line 38: The workflow was changed to use actions/setup-python@v6 which
requires Node.js 24 and GitHub runner v2.327.1+, so verify and update the
workflow's runner configuration: check the runs-on entries and any self-hosted
runner tooling to ensure they are v2.327.1 or newer (or upgrade those runners),
or if upgrading runners is not possible, revert to a compatible action version
(e.g., actions/setup-python@v4) to avoid failures; update any CI runner
documentation and pipeline automation that provisions self-hosted runners
accordingly.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: abb25537-88b2-442d-a45f-0715bf2a5cfa

📥 Commits

Reviewing files that changed from the base of the PR and between b9bf750 and 8e0fa90.

📒 Files selected for processing (2)

• .github/workflows/publish.yml
• .github/workflows/test.yml

[ernest-tpximpact]

lgtm