ci: unified GH action version + used SemVer

.github/workflows/auto-assign.yml

@@ -9,7 +9,7 @@ jobs:
         runs-on: trailheadapps-Ubuntu
         steps:
             - name: 'Auto-assign issue'
-              uses: pozil/auto-assign-issue@v2
+              uses: pozil/auto-assign-issue@v4.0.1
               with:
                   repo-token: ${{ secrets.GITHUB_TOKEN }}
                   assignees: ${{ vars.DEFAULT_ISSUE_ASSIGNEE }}

.github/workflows/ci-pr.yml

@@ -37,16 +37,16 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             # Install Volta to enforce proper node and package manager versions
             - name: 'Install Volta'
-              uses: volta-cli/action@v4
+              uses: volta-cli/action@v5.0.0
 
             # Cache node_modules to speed up the process
             - name: 'Restore node_modules cache'
               id: cache-npm
-              uses: actions/cache@v4
+              uses: actions/cache@v6.0.0
               with:
                   path: node_modules
                   key: npm-${{ hashFiles('**/package-lock.json') }}
@@ -75,7 +75,7 @@ jobs:
 
             # Upload code coverage data
             - name: 'Upload code coverage for LWC to Codecov.io'
-              uses: codecov/codecov-action@v4
+              uses: codecov/codecov-action@v7.0.0
               with:
                   token: ${{ secrets.CODECOV_TOKEN }}
                   flags: LWC
@@ -94,7 +94,7 @@ jobs:
         steps:
             - name: 'Fetch Dependabot metadata'
               id: dependabot
-              uses: dependabot/fetch-metadata@v2
+              uses: dependabot/fetch-metadata@v3.1.0
 
             - name: 'Check auto merge conditions'
               id: auto-merge
@@ -124,7 +124,7 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             # Run PMD scan
             - name: 'Run PMD scan'
@@ -192,7 +192,7 @@ jobs:
 
             # Upload code coverage data
             - name: 'Upload code coverage for Apex to Codecov.io'
-              uses: codecov/codecov-action@v4
+              uses: codecov/codecov-action@v7.0.0
               with:
                   token: ${{ secrets.CODECOV_TOKEN }}
                   flags: Apex

.github/workflows/ci.yml

@@ -18,16 +18,16 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             # Install Volta to enforce proper node and package manager versions
             - name: 'Install Volta'
-              uses: volta-cli/action@v4
+              uses: volta-cli/action@v5.0.0
 
             # Cache node_modules to speed up the process
             - name: 'Restore node_modules cache'
               id: cache-npm
-              uses: actions/cache@v4
+              uses: actions/cache@v6.0.0
               with:
                   path: node_modules
                   key: npm-${{ hashFiles('**/package-lock.json') }}
@@ -56,7 +56,7 @@ jobs:
 
             # Upload code coverage data
             - name: 'Upload code coverage for LWC to Codecov.io'
-              uses: codecov/codecov-action@v4
+              uses: codecov/codecov-action@v7.0.0
               with:
                   token: ${{ secrets.CODECOV_TOKEN }}
                   flags: LWC
@@ -68,7 +68,7 @@ jobs:
         steps:
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             # Run PMD scan
             - name: 'Run PMD scan'
@@ -130,7 +130,7 @@ jobs:
 
             # Upload code coverage data
             - name: 'Upload code coverage for Apex to Codecov.io'
-              uses: codecov/codecov-action@v4
+              uses: codecov/codecov-action@v7.0.0
               with:
                   token: ${{ secrets.CODECOV_TOKEN }}
                   flags: Apex
@@ -146,7 +146,7 @@ jobs:
         steps:
             # Checkout the source code with history
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             # Check for package changes using git diff
             - name: 'Check for package changes'
@@ -207,7 +207,7 @@ jobs:
 
             # Trigger packaging workflow if needed
             - name: 'Trigger packaging workflow if needed'
-              uses: peter-evans/repository-dispatch@v3
+              uses: peter-evans/repository-dispatch@v4.0.1
               if: steps.checkForChanges.outputs.changes != '[]'
               with:
                   token: ${{ secrets.REPO_ACCESS_TOKEN }}

.github/workflows/codetour-watch.yml

@@ -10,10 +10,10 @@ jobs:
         if: github.actor != 'trailheadapps-bot' && github.actor != 'dependabot[bot]'
         steps:
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
 
             - name: 'Watch CodeTour changes'
-              uses: pozil/codetour-watch@v3.0.0
+              uses: pozil/codetour-watch@v4.0.0
 
     skip-codetour-watch:
         if: github.actor == 'trailheadapps-bot' || github.actor == 'dependabot[bot]'

.github/workflows/manual-packaging.yml

@@ -17,7 +17,7 @@ jobs:
         steps:
             # Trigger packaging workflow
             - name: 'Trigger packaging workflow'
-              uses: peter-evans/repository-dispatch@v3
+              uses: peter-evans/repository-dispatch@v4.0.1
               with:
                   token: ${{ secrets.REPO_ACCESS_TOKEN }}
                   event-type: start-packaging

.github/workflows/new-issue-welcome.yml

@@ -8,7 +8,7 @@ jobs:
     comment:
         runs-on: trailheadapps-Ubuntu
         steps:
-            - uses: actions/github-script@v6
+            - uses: actions/github-script@v9.0.0
               with:
                   script: |
                       await github.rest.issues.createComment({

.github/workflows/packaging.yml

@@ -25,7 +25,7 @@ jobs:
 
             # Checkout the source code
             - name: 'Checkout source code'
-              uses: actions/checkout@v4
+              uses: actions/checkout@v7.0.0
               with:
                   ref: ${{ github.event.client_payload.ref }}
 
@@ -112,7 +112,7 @@ jobs:
             # Create PR for new package version
             - name: 'Create PR for new package version'
               id: create-pr
-              uses: peter-evans/create-pull-request@v6
+              uses: peter-evans/create-pull-request@v8.1.1
               with:
                   title: 'Package: ${{ matrix.package }} - New version: ${{ steps.createPackageVersion.outputs.packageVersionId }}'
                   body: 'Released new package version ${{ steps.createPackageVersion.outputs.packageVersionId }} for package ${{ matrix.package }}'