Merge pull request #2 from TekuSP/gh-actions-update-1704932606

Update GitHub Action Versions

.github/workflows/actions_update.yml

@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4.1.1
         with:
           # [Required] Access token with `workflow` scope.
           token: ${{ secrets.WORKFLOW_SECRET }}

.github/workflows/codeql.yml

@@ -49,11 +49,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v4.1.1
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@codeql-bundle-20230524
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -80,22 +80,22 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Setup .NET
-      uses: actions/setup-dotnet@v1
+      uses: actions/setup-dotnet@v4.0.0
       with:
         dotnet-version: 7.0.x
 
     - name: Setup MSBuild Path
-      uses: microsoft/[email protected]
+      uses: microsoft/setup-msbuild@v1.3.1
       with:
         msbuild-architecture: x64
 
     - name: Install NuGet client
-      uses: nuget/setup-nuget@v1
+      uses: nuget/setup-nuget@v1.2.0
       with:
         nuget-version: 'latest'
 
     - name: Install Nanoframework Extension
-      uses: nanoframework/nanobuild@v1
+      uses: nanoframework/nanobuild@v1.14
       env:
         GITHUB_AUTH_TOKEN: ${{ secrets.githubAuth }}
 
@@ -108,6 +108,6 @@ jobs:
         Configuration: Release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@codeql-bundle-20230524
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/nanoframework_build.yml

@@ -20,50 +20,50 @@ jobs:
       solution: 'OpenHalo.sln'
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v4.1.1
         with:
           fetch-depth: 0
 
       - name: Setup .NET
-        uses: actions/setup-dotnet@v1
+        uses: actions/setup-dotnet@v4.0.0
         with:
           dotnet-version: 7.0.x
 
       - name: Set up JDK 17
-        uses: actions/setup-java@v3
+        uses: actions/setup-java@v4.0.0
         with:
           java-version: 17
           distribution: 'zulu' # Alternative distribution options are available.
 
       - name: Setup MSBuild Path
-        uses: microsoft/[email protected]
+        uses: microsoft/setup-msbuild@v1.3.1
         with:
           msbuild-architecture: x64
 
       # https://github.com/NuGet/setup-nuget
       - name: Install NuGet client
-        uses: nuget/setup-nuget@v1
+        uses: nuget/setup-nuget@v1.2.0
         with:
           nuget-version: 'latest'
 
       - name: Install Nanoframework Extension
-        uses: nanoframework/nanobuild@v1
+        uses: nanoframework/nanobuild@v1.14
         env:
           GITHUB_AUTH_TOKEN: ${{ secrets.githubAuth }}
 
       - name: Restore nugets
         run: nuget restore ${{ env.solution }} -ConfigFile nuget.config
 
       - name: Cache SonarCloud packages
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.2
         with:
           path: ~\sonar\cache
           key: ${{ runner.os }}-sonar
           restore-keys: ${{ runner.os }}-sonar
 
       - name: Cache SonarCloud scanner
         id: cache-sonar-scanner
-        uses: actions/cache@v3
+        uses: actions/cache@v3.3.2
         with:
           path: .\.sonar\scanner
           key: ${{ runner.os }}-sonar-scanner

.github/workflows/nanoframework_changelog.yml

@@ -8,7 +8,7 @@ jobs:
     name: Update Changelog
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4.1.1
         with:
           fetch-depth: 0
       - name: Update Changelog
@@ -18,7 +18,7 @@ jobs:
           ./git-chglog -o CHANGELOG.md
           rm git-chglog
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v3
+        uses: peter-evans/create-pull-request@v5.0.2
         with:
           commit-message: update changelog
           title: Update Changelog

.github/workflows/nanoframework_dependabot.yml

@@ -20,8 +20,8 @@ jobs:
     runs-on: windows-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
-      - uses: nanoframework/nanodu@v1
+        uses: actions/checkout@v4.1.1
+      - uses: nanoframework/nanodu@v1.0.19
         env:
           GITHUB_TOKEN: ${{ github.token }}
         with: