🩹 [Patch]: Reusable workflow dependencies updated (#332)

Reusable workflow dependencies are now updated to newer pinned versions,
improving reliability and consistency across repository automation while
preserving existing workflow behavior.

## Changed: Reusable workflow dependency versions

The repository workflows now use updated pinned versions of key GitHub
Actions and PSModule actions. All references remain SHA-pinned with
version comments, keeping the same security model while applying
dependency updates.

## Technical Details

Updated action pins in `.github/workflows/Build-Docs.yml`,
`.github/workflows/Build-Site.yml`,
`.github/workflows/Lint-Repository.yml`,
`.github/workflows/Lint-SourceCode.yml`, `.github/workflows/Linter.yml`,
`.github/workflows/Publish-Site.yml`,
`.github/workflows/Test-Module.yml`, and
`.github/workflows/Test-ModuleLocal.yml`. Changes include
`actions/download-artifact` (`v8.0.1`), `actions/deploy-pages`
(`v5.0.0`), `actions/configure-pages` (`v6.0.0`),
`PSModule/Invoke-ScriptAnalyzer` (`v4.1.3`), and
`super-linter/super-linter` (`v8.6.0`).

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: MariusStorhaug

.github/workflows/Build-Docs.yml

@@ -24,7 +24,7 @@ jobs:
           fetch-depth: 0
 
       - name: Download module artifact
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: module
           path: ${{ fromJson(inputs.Settings).WorkingDirectory }}/outputs/module
@@ -72,7 +72,7 @@ jobs:
 
       - name: Lint documentation
         id: super-linter
-        uses: super-linter/super-linter/slim@61abc07d755095a68f4987d1c2c3d1d64408f1f9 # v8.5.0
+        uses: super-linter/super-linter/slim@9e863354e3ff62e0727d37183162c4a88873df41 # v8.6.0
         env:
           RUN_LOCAL: true
           DEFAULT_BRANCH: main

.github/workflows/Build-Site.yml

@@ -26,7 +26,7 @@ jobs:
         uses: PSModule/Install-PSModuleHelpers@ed79b6e3aa8c9cd3d30ab2bf02ea6bd4687b9c74 # v1.0.7
 
       - name: Download docs artifact
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: docs
           path: ${{ fromJson(inputs.Settings).WorkingDirectory }}/outputs/docs

.github/workflows/Lint-Repository.yml

@@ -49,7 +49,7 @@ jobs:
 
       - name: Lint code base
         id: super-linter
-        uses: super-linter/super-linter@61abc07d755095a68f4987d1c2c3d1d64408f1f9 # v8.5.0
+        uses: super-linter/super-linter@9e863354e3ff62e0727d37183162c4a88873df41 # v8.6.0
         env:
           GITHUB_TOKEN: ${{ github.token }}
           DEFAULT_WORKSPACE: ${{ fromJson(env.Settings).WorkingDirectory }}

.github/workflows/Lint-SourceCode.yml

@@ -26,7 +26,7 @@ jobs:
           persist-credentials: false
 
       - name: Lint-SourceCode
-        uses: PSModule/Invoke-ScriptAnalyzer@17bb50ef88b72e7d723e56b81d2e04f27ddc7e37 # v4.1.2
+        uses: PSModule/Invoke-ScriptAnalyzer@6aeb1bc093b89f9b15c2ac3e5f9ef9e0879dc755 # v4.1.3
         with:
           Debug: ${{ fromJson(inputs.Settings).Debug }}
           Prerelease: ${{ fromJson(inputs.Settings).Prerelease }}

.github/workflows/Linter.yml

@@ -25,10 +25,11 @@ jobs:
           fetch-depth: 0
 
       - name: Lint code base
-        uses: super-linter/super-linter@61abc07d755095a68f4987d1c2c3d1d64408f1f9 # v8.5.0
+        uses: super-linter/super-linter@9e863354e3ff62e0727d37183162c4a88873df41 # v8.6.0
         env:
           GITHUB_TOKEN: ${{ github.token }}
           VALIDATE_BIOME_FORMAT: false
+          VALIDATE_GITHUB_ACTIONS_ZIZMOR: false
           VALIDATE_JSCPD: false
           VALIDATE_JSON_PRETTIER: false
           VALIDATE_MARKDOWN_PRETTIER: false

.github/workflows/Publish-Site.yml

@@ -22,8 +22,8 @@ jobs:
     env:
       Settings: ${{ inputs.Settings }}
     steps:
-      - uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5.0.0
+      - uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
 
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0

.github/workflows/Test-Module.yml

@@ -57,7 +57,7 @@ jobs:
           persist-credentials: false
 
       - name: Download module artifact
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: module
           path: ${{ fromJson(inputs.Settings).WorkingDirectory }}/outputs/module
@@ -87,13 +87,13 @@ jobs:
           persist-credentials: false
 
       - name: Download module artifact
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: module
           path: ${{ fromJson(inputs.Settings).WorkingDirectory }}/outputs/module
 
       - name: Lint-Module
-        uses: PSModule/Invoke-ScriptAnalyzer@17bb50ef88b72e7d723e56b81d2e04f27ddc7e37 # v4.1.2
+        uses: PSModule/Invoke-ScriptAnalyzer@6aeb1bc093b89f9b15c2ac3e5f9ef9e0879dc755 # v4.1.3
         with:
           Path: outputs/module
           Debug: ${{ fromJson(inputs.Settings).Debug }}

.github/workflows/Test-ModuleLocal.yml

@@ -59,7 +59,7 @@ jobs:
           fetch-depth: 0
 
       - name: Download module artifact
-        uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: module
           path: ${{ fromJson(inputs.Settings).WorkingDirectory }}/outputs/module

.github/workflows/Workflow-Test-Default.yml

@@ -1,10 +1,14 @@
 name: Workflow-Test [Default]
 
-run-name: "Workflow-Test [Default] - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}"
+run-name: 'Workflow-Test [Default] - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}'
 
 on:
   workflow_dispatch:
   pull_request:
+    paths:
+      - '.github/workflows/**'
+      - '!.github/workflows/Release.yml'
+      - '!.github/workflows/Linter.yml'
   schedule:
     - cron: '0 0 * * *'
 
@@ -33,3 +37,7 @@ jobs:
       TEST_USER_PAT: ${{ secrets.TEST_USER_PAT }}
     with:
       WorkingDirectory: tests/srcTestRepo
+      ImportantFilePatterns: |
+        ^src/
+        ^README\.md$
+        ^\.github/workflows/(?!Release\.yml$|Linter\.yml$)

.github/workflows/Workflow-Test-WithManifest.yml

@@ -1,10 +1,14 @@
 name: Workflow-Test [WithManifest]
 
-run-name: "Workflow-Test [WithManifest] - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}"
+run-name: 'Workflow-Test [WithManifest] - [${{ github.event.pull_request.title }} #${{ github.event.pull_request.number }}] by @${{ github.actor }}'
 
 on:
   workflow_dispatch:
   pull_request:
+    paths:
+      - '.github/workflows/**'
+      - '!.github/workflows/Release.yml'
+      - '!.github/workflows/Linter.yml'
   schedule:
     - cron: '0 0 * * *'
 
@@ -33,3 +37,7 @@ jobs:
       TEST_USER_PAT: ${{ secrets.TEST_USER_PAT }}
     with:
       WorkingDirectory: tests/srcWithManifestTestRepo
+      ImportantFilePatterns: |
+        ^src/
+        ^README\.md$
+        ^\.github/workflows/(?!Release\.yml$|Linter\.yml$)