fix(release): Update workflow actions

.github/workflows/ci.yml

@@ -2,16 +2,17 @@ name: CI
 
 on:
   pull_request:
-    branches: [main, master]
-    types: [opened, reopened, synchronize, ready_for_review]
+    branches: [ main, master ]
+    types: [ opened, reopened, synchronize, ready_for_review ]
   workflow_dispatch:
 
 permissions:
   contents: read
   pull-requests: write
 
 concurrency:
-  group: ci-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  group: ci-${{ github.workflow }}-${{ github.event.pull_request.number ||
+    github.ref }}
   cancel-in-progress: true
 
 jobs:
@@ -20,15 +21,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v5
         with:
           version: 10.33.0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm
@@ -37,26 +38,30 @@ jobs:
         run: pnpm install --frozen-lockfile
 
       - name: Run lint
-        run: pnpm nx run-many -t lint --projects=cdg-core,cdg-loader,cdg-player,cdg-controls,demo,framework-demo --outputStyle=stream
+        run: pnpm nx run-many -t lint
+          --projects=cdg-core,cdg-loader,cdg-player,cdg-controls,demo,framework-demo
+          --outputStyle=stream
 
       - name: Run typecheck
-        run: pnpm nx run-many -t typecheck --projects=cdg-core,cdg-loader,cdg-player,cdg-controls,demo,framework-demo --outputStyle=stream
+        run: pnpm nx run-many -t typecheck
+          --projects=cdg-core,cdg-loader,cdg-player,cdg-controls,demo,framework-demo
+          --outputStyle=stream
 
   unit-test:
     name: ci/unit-test
     runs-on: ubuntu-latest
     needs: lint-typecheck
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v5
         with:
           version: 10.33.0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm
@@ -74,14 +79,14 @@ jobs:
         run: cat coverage/summary.md >> "$GITHUB_STEP_SUMMARY"
 
       - name: Upload coverage artifacts
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: coverage-reports
           path: coverage/**
 
       - name: Post coverage summary comment
         if: ${{ github.event_name == 'pull_request' }}
-        uses: marocchino/sticky-pull-request-comment@v2
+        uses: marocchino/sticky-pull-request-comment@v3
         with:
           header: coverage-summary
           path: coverage/summary.md
@@ -92,15 +97,15 @@ jobs:
     needs: unit-test
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v5
         with:
           version: 10.33.0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm

.github/workflows/codeql.yml

@@ -2,10 +2,10 @@ name: CodeQL
 
 on:
   pull_request:
-    branches: [main, master]
-    types: [opened, reopened, synchronize, ready_for_review]
+    branches: [ main, master ]
+    types: [ opened, reopened, synchronize, ready_for_review ]
   push:
-    branches: [main, master]
+    branches: [ main, master ]
   schedule:
     - cron: "23 4 * * 1"
 
@@ -15,7 +15,8 @@ permissions:
   security-events: write
 
 concurrency:
-  group: codeql-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  group: codeql-${{ github.workflow }}-${{ github.event.pull_request.number ||
+    github.ref }}
   cancel-in-progress: true
 
 jobs:
@@ -25,24 +26,24 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        language: [javascript-typescript]
+        language: [ javascript-typescript ]
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v3
+        uses: github/codeql-action/init@v4
         with:
           languages: ${{ matrix.language }}
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v5
         with:
           version: 10.33.0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm
@@ -54,4 +55,4 @@ jobs:
         run: pnpm run ci:build
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v3
+        uses: github/codeql-action/analyze@v4

.github/workflows/docs-pages.yml

@@ -2,8 +2,8 @@ name: Docs Pages
 
 on:
   workflow_run:
-    workflows: [Release]
-    types: [completed]
+    workflows: [ Release ]
+    types: [ completed ]
   workflow_dispatch:
     inputs:
       deploy:
@@ -22,21 +22,24 @@ concurrency:
 jobs:
   build:
     name: docs/build-static-site
-    if: ${{ (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success') || github.event_name == 'workflow_dispatch' }}
+    if: ${{ (github.event_name == 'workflow_run' &&
+      github.event.workflow_run.conclusion == 'success') || github.event_name ==
+      'workflow_dispatch' }}
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
-          ref: ${{ github.event_name == 'workflow_run' && github.event.workflow_run.head_sha || github.ref }}
+          ref: ${{ github.event_name == 'workflow_run' &&
+            github.event.workflow_run.head_sha || github.ref }}
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v5
         with:
           version: 10.33.0
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm
@@ -48,18 +51,20 @@ jobs:
         run: pnpm run storybook:build
 
       - name: Configure GitHub Pages
-        if: ${{ (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success') || inputs.deploy }}
-        uses: actions/configure-pages@v5
+        if: ${{ (github.event_name == 'workflow_run' &&
+          github.event.workflow_run.conclusion == 'success') || inputs.deploy }}
+        uses: actions/configure-pages@v6
 
       - name: Upload Pages artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v5
         with:
           path: apps/storybook-hub/.dist
 
   deploy:
     name: docs/deploy-github-pages
     needs: build
-    if: ${{ (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success') || inputs.deploy }}
+    if: ${{ (github.event_name == 'workflow_run' &&
+      github.event.workflow_run.conclusion == 'success') || inputs.deploy }}
     runs-on: ubuntu-latest
     permissions:
       pages: write
@@ -70,4 +75,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

.github/workflows/release.yml

@@ -29,12 +29,12 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@v4
+        uses: pnpm/action-setup@v5
         with:
           version: 10.33.0
 
@@ -47,13 +47,12 @@ jobs:
           git config --local user.name ${config_un}
 
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: 24
           cache: pnpm
           registry-url: https://registry.npmjs.org
           scope: "@cxing"
-          always-auth: true
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile