Merge branch 'main' into dependabot/github_actions/softprops/action-gh-release-3.0.0

Author: data-douser

.github/workflows/build-and-test-extension.yml

@@ -64,7 +64,7 @@ jobs:
           install-language-runtimes: 'false'
 
       - name: Cache VS Code for integration tests
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           key: vscode-test-${{ runner.os }}-stable
           path: extensions/vscode/.vscode-test

.github/workflows/copilot-setup-steps.yml

@@ -78,7 +78,7 @@ jobs:
           npm run bundle:server
 
       - name: Copilot Setup - Cache VS Code for integration tests
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
         with:
           key: vscode-test-${{ runner.os }}-stable
           path: extensions/vscode/.vscode-test

.github/workflows/release-codeql.yml

@@ -127,7 +127,7 @@ jobs:
           ls -lh dist-packs/
 
       - name: CodeQL - Upload CodeQL pack artifacts
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: codeql-tool-query-packs-${{ steps.version.outputs.version }}
           path: dist-packs/*.tar.gz

.github/workflows/release-npm.yml

@@ -99,7 +99,7 @@ jobs:
           echo "✅ Published npm package to npmjs.org (with provenance)"
 
       - name: npm - Upload release build artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: release-build-${{ steps.version.outputs.version }}
           path: |

.github/workflows/release-vsix.yml

@@ -112,7 +112,7 @@ jobs:
           done
 
       - name: VSIX - Upload artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: codeql-development-mcp-server-vsix-${{ steps.version.outputs.version }}
           path: extensions/vscode/${{ steps.package.outputs.vsix_name }}

.github/workflows/release.yml

@@ -232,7 +232,7 @@ jobs:
           tar -czvf codeql-development-mcp-server-${{ needs.resolve-version.outputs.version }}.tar.gz -C dist-package .
 
       - name: Release - Upload artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
         with:
           name: codeql-development-mcp-server-${{ needs.resolve-version.outputs.version }}
           path: codeql-development-mcp-server-${{ needs.resolve-version.outputs.version }}.tar.gz