Update GitHub Actions workflows. (#2342)

This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[c07de48a7d31d9a6f2f222271df349ce28f92f16](pulumi/ci-mgmt@c07de48).

## Rebasing this PR

If this PR falls behind `master` on pulumi-eks and needs to be
regenerated against the latest tip, dispatch
[`update-workflows-single-bridged-provider`](https://github.com/pulumi/ci-mgmt/actions/workflows/update-workflows-single-bridged-provider.yml):

```sh
gh workflow run update-workflows-single-bridged-provider.yml \
  --repo pulumi/ci-mgmt \
  -f provider_name=eks \
  -f automerge=false
```

That re-runs this same workflow against current ci-mgmt `master`, closes
this stale PR (via the "obsolete PR" cleanup step above), and opens a
fresh one rebased on the provider's current `master`.

Co-authored-by: Pulumi Bot <bot@pulumi.com>

Author: pulumi-provider-automation[bot]

.github/workflows/build_sdk.yml

@@ -81,7 +81,7 @@ jobs:
           cache_save: false
       - name: Setup Go Cache
         if: matrix.language == 'go' || contains(matrix.language, 'go')
-        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           cache-dependency-path: |
             provider/*.sum

.github/workflows/prerequisites.yml

@@ -99,7 +99,7 @@ jobs:
         key: ${{ runner.os }}-go-prerequisites-${{ hashFiles('provider/*.sum', 'upstream/*.sum', 'sdk/go/*.sum', 'sdk/*.sum', '*.sum') }}
     - name: Setup Go Cache
       if: inputs.acceptance_fanout == false
-      uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
+      uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
       with:
         cache-dependency-path: |
           provider/*.sum

.github/workflows/publish.yml

@@ -174,7 +174,7 @@ jobs:
         # only saving the cache in the prerequisites job
         cache_save: false
     - name: Setup Node
-      uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
+      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
       with:
         # we don't set node-version because we install with mise.
         # this step is needed to setup npm auth

.github/workflows/verify-release.yml

@@ -84,7 +84,7 @@ jobs:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           cache_save: false
       - name: Setup Go Cache
-        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
+        uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
         with:
           cache-dependency-path: |
             provider/*.sum
@@ -122,12 +122,6 @@ jobs:
           role-duration-seconds: 7200
           role-session-name: aws@githubActions
           role-to-assume: ${{ steps.esc-secrets.outputs.AWS_CI_ROLE_ARN }}
-      - name: Setup Node
-        uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
-        with:
-          # we don't set node-version because we install with mise.
-          # this step is needed to setup npm auth
-          registry-url: https://registry.npmjs.org
       - name: Verify nodejs release
         uses: pulumi/verify-provider-release@679d5e6838ac4f68696bfa1bf9e2c5da94509dd6 # v1.3.1
         with:
@@ -136,7 +130,6 @@ jobs:
           provider: eks
           providerVersion: ${{ inputs.providerVersion }}
         env:
-          NODE_AUTH_TOKEN: ${{ steps.esc-secrets.outputs.NPM_TOKEN }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           NPM_TOKEN: ${{ steps.esc-secrets.outputs.NPM_TOKEN }}
           PUBLISH_REPO_PASSWORD: ${{ steps.esc-secrets.outputs.OSSRH_PASSWORD }}