[internal] Update GitHub Actions workflow files

Author: pulumi-bot

.github/actions/setup-tools/action.yml

@@ -47,7 +47,7 @@ runs:
 
     - name: Install Pulumi CLI
       if: inputs.tools == 'all' || contains(inputs.tools, 'pulumicli')
-      uses: pulumi/actions@df5a93ad715135263c732ba288301bd044c383c0 # v6
+      uses: pulumi/actions@cc7494be991dba0978f7ffafaf995b0449a0998e # v6
       with:
         pulumi-version: "dev"
 

.github/workflows/lint.yml

@@ -50,11 +50,8 @@ jobs:
     - name: prepare workspace
       continue-on-error: true
       run: make prepare_local_workspace
-
-    # TODO[pulumi/ci-mgmt#1622] unfortunate workaround for mysterious lint failure
-    #
-    # - name: golangci-lint
-    #   uses: golangci/golangci-lint-action@55c2c1448f86e01eaae002a5a3a9624417608d84 # v6
-    #   with:
-    #     version: v1.64.6
-    #     working-directory: provider
+    - name: golangci-lint
+      uses: golangci/golangci-lint-action@55c2c1448f86e01eaae002a5a3a9624417608d84 # v6
+      with:
+        version: v1.64.6
+        working-directory: provider

.github/workflows/upgrade-java.yml

@@ -23,6 +23,11 @@ permissions:
   pull-requests: write
 
 env:
+
+  # upgrade-provider calls into gh CLI tool to open PRs that uses GH_TOKEN env var, which is not obivous.
+  # setting this correctly makes sure the PR has the correct owner and permissions work as expected.
+  GH_TOKEN: ${{ secrets.PULUMI_PROVIDER_AUTOMATION_TOKEN || secrets.PULUMI_BOT_TOKEN || secrets.GITHUB_TOKEN }}
+
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
 jobs:
@@ -58,5 +63,6 @@ jobs:
         env:
           V: ${{inputs.version}}
           REPO: ${{github.repository}}
+          GH_TOKEN: ${{env.GH_TOKEN}}
         run: |
           upgrade-provider "$REPO" --kind=java --java-version="$V"

mise.toml

@@ -0,0 +1,16 @@
+# WARNING: This file is autogenerated - changes will be overwritten when regenerated by https://github.com/pulumi/ci-mgmt
+
+[tools]
+
+# Runtimes
+go = '1.21'
+node = '20'
+python = '3.11.8'
+dotnet = '8.0'
+# Corretto version used as Java SE/OpenJDK version no longer offered
+java = 'corretto-11'
+
+# Executable tools
+pulumi = 'latest'
+"go:github.com/pulumi/pulumictl/cmd/pulumictl" = 'latest'
+gradle = '7.6'