Merge branch 'main' into dependabot/github_actions/github/codeql-action-3.28.12

Author: blowdart

.github/workflows/ci-build.yml

@@ -49,7 +49,7 @@ jobs:
       run: dotnet build --configuration Debug --no-restore
 
     - name: Upload Build Artifacts
-      uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       with:
         name: build-artifacts
         path: |
@@ -96,7 +96,7 @@ jobs:
         thresholds: "10 30"
 
     - name: Upload Code Coverage Results
-      uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       with:
         name: coverage-results
         path: |
@@ -111,7 +111,7 @@ jobs:
         files: "test/**/TestResults.xml"
 
     - name: Upload Test Artifacts
-      uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       with:
         name: test-results
         path: "test/**/TestResults.xml"

.github/workflows/ci-manual-build-test-sign.yml

@@ -75,7 +75,7 @@ jobs:
         Get-ChildItem -Path ${{ env.nupkgDirectory }} -Recurse -Force
 
     - name: Upload unsigned nupkgs
-      uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       with:
         name: build-artifacts
         path: ${{ env.nupkgDirectory }}/*
@@ -98,7 +98,7 @@ jobs:
       run: dotnet tool install --tool-path ./sign sign --version 0.9.1-beta.25169.2
 
     - name: 'Gather nupkgs from build output'
-      uses: actions/download-artifact@b14cf4c92620c250e1c074ab0a5800e37df86765 # v4.2.0
+      uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
       with:
         name: build-artifacts
         path : ${{ env.nupkgDirectory }}
@@ -122,7 +122,7 @@ jobs:
         ./sign/sign code azure-key-vault *.nupkg --base-directory ${{ env.nupkgDirectory }} --azure-key-vault-url "${{ secrets.AZURE_KEY_VAULT_URL }}" --azure-key-vault-certificate "${{ secrets.AZURE_KEY_VAULT_CERTIFICATE }}"
 
     - name: Upload signed nupkgs
-      uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       with:
         name: signed-artifacts
         path: ${{ env.nupkgDirectory }}/*
@@ -146,7 +146,7 @@ jobs:
       uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1
 
     - name: 'Gather nupkgs from signing output'
-      uses: actions/download-artifact@b14cf4c92620c250e1c074ab0a5800e37df86765 # v4.2.0
+      uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
       with:
         name: signed-artifacts
         path : ${{ env.nupkgDirectory }}

.github/workflows/upload-coverage-report.yml

@@ -23,7 +23,7 @@ jobs:
         egress-policy: audit
 
     - name: 'Download coverage results'
-      uses: actions/download-artifact@b14cf4c92620c250e1c074ab0a5800e37df86765 # v4.2.0
+      uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
       with:
         name: coverage-results