Update GitHub Actions workflows. (#1644)

This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[c07de48a7d31d9a6f2f222271df349ce28f92f16](pulumi/ci-mgmt@c07de48).

## Rebasing this PR

If this PR falls behind `master` on pulumi-cloudflare and needs to be
regenerated against the latest tip, dispatch
[`update-workflows-single-bridged-provider`](https://github.com/pulumi/ci-mgmt/actions/workflows/update-workflows-single-bridged-provider.yml):

```sh
gh workflow run update-workflows-single-bridged-provider.yml \
  --repo pulumi/ci-mgmt \
  -f provider_name=cloudflare \
  -f automerge=false
```

That re-runs this same workflow against current ci-mgmt `master`, closes
this stale PR (via the "obsolete PR" cleanup step above), and opens a
fresh one rebased on the provider's current `master`.

Co-authored-by: Pulumi Bot <bot@pulumi.com>

Author: pulumi-provider-automation[bot]

.github/workflows/build_sdk.yml

@@ -79,7 +79,7 @@ jobs:
           cache_save: false
       - name: Setup Go Cache
         if: matrix.language == 'go' || contains(matrix.language, 'go')
-        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           cache-dependency-path: |
             provider/*.sum

.github/workflows/main-post-build.yml

@@ -65,7 +65,7 @@ jobs:
           # only saving the cache in the prerequisites job
           cache_save: false
       - name: Setup Go Cache
-        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           cache-dependency-path: |
             provider/*.sum

.github/workflows/prerequisites.yml

@@ -97,7 +97,7 @@ jobs:
         key: ${{ runner.os }}-go-prerequisites-${{ hashFiles('provider/*.sum', 'upstream/*.sum', 'sdk/go/*.sum', 'sdk/*.sum', '*.sum') }}
     - name: Setup Go Cache
       if: inputs.acceptance_fanout == false
-      uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
+      uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
       with:
         cache-dependency-path: |
           provider/*.sum

.github/workflows/publish.yml

@@ -165,7 +165,7 @@ jobs:
         # only saving the cache in the prerequisites job
         cache_save: false
     - name: Setup Node
-      uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
       with:
         # we don't set node-version because we install with mise.
         # this step is needed to setup npm auth

.github/workflows/test.yml

@@ -80,7 +80,7 @@ jobs:
     - name: Download bin
       uses: ./.github/actions/download-provider
     - name: Setup Go Cache
-      uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
+      uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
       if: matrix.language == 'go' || contains(matrix.language, 'go')
       with:
         cache-dependency-path: |

.github/workflows/verify-release.yml

@@ -81,7 +81,7 @@ jobs:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           cache_save: false
       - name: Setup Go Cache
-        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           cache-dependency-path: |
             provider/*.sum