Bump all actions versions and use ubuntu latest runners

.github/actions/buildresources/action.yaml

@@ -21,7 +21,7 @@ runs:
   steps:
     - name: Setup JupyterBook Cache
       if: inputs.jb-cache == 'true'
-      uses: actions/cache@v2
+      uses: actions/cache@v4
       with:
         path: ./book/_build
         # NOTE: change key to "jupyterbook-N+1" to force rebuilding cache
@@ -52,7 +52,7 @@ runs:
 
     - name: Save Build
       if: ${{ always() && inputs.jb-save == 'true'}}
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         name: build
         path: book/_build/

.github/workflows/build_website.yaml

@@ -8,9 +8,9 @@ on:
   pull_request_target:
     types: [labeled, synchronize]
     paths:
-      - '.github/**'
+      - '.github/**/*'
       - '{{ cookiecutter.repo_directory }}/**'
-      - 'book/**'
+      - 'book/**/*'
       - 'conda/**'
       - 'scripts/**'
       - 'cookiecutter.yaml'
@@ -31,7 +31,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         ref: ${{ github.event.pull_request.head.sha }}
 

.github/workflows/deploy.yaml

@@ -7,19 +7,18 @@ on:
       - '{{ cookiecutter.repo_directory }}/**'
       - 'scripts/**'
       - '.github/workflows/deploy.yaml'
-      - '.github/actions/**'
       - 'cookiecutter.yaml'
 
     branches:
       - main
 
 jobs:
   build-and-deploy:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
 
     - name: Configure NASA Earthdata Login
       continue-on-error: true

.github/workflows/manual.yaml

@@ -5,12 +5,12 @@ on:
 
 jobs:
   build-and-test:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
-      
+      uses: actions/checkout@v4
+
     - name: Configure NASA Earthdata Login
       continue-on-error: true
       env:
@@ -19,7 +19,7 @@ jobs:
       run: |
         echo "machine urs.earthdata.nasa.gov login $EARTHDATA_USER password $EARTHDATA_PASS" > ~/.netrc
         chmod 0600 ~/.netrc
-        
+
     - uses: ./.github/actions/buildresources
       with:
         jb-cache: false

.github/workflows/netlifypreview.yaml

@@ -6,14 +6,14 @@ on:
 
 jobs:
   add-preview:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     # This workflow accesses secrets and checks out a PR, so only run if labelled
     # https://securitylab.github.com/research/github-actions-preventing-pwn-requests/
     if: contains(github.event.pull_request.labels.*.name, 'preview')
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         ref: ${{ github.event.pull_request.head.sha }}
 
@@ -34,7 +34,7 @@ jobs:
 
     - name: Deploy Website Preview
       if: always()
-      uses: nwtgck/actions-netlify@v2.0
+      uses: nwtgck/actions-netlify@v3.0
       with:
         publish-dir: './book/_build/html'
         production-deploy: false

.github/workflows/qaqc.yaml

@@ -7,7 +7,7 @@ on:
 
 jobs:
   quality-control:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     defaults:
       run:
         shell: bash -l {0}