fix hard-coded version

Signed-off-by: Matt Wrock <matt@mattwrock.com>

Author: mwrock

.github/workflows/ci-main-pull-request-stub.yml

@@ -40,10 +40,9 @@ jobs:
       # go-private-modules: GOPRIVATE for Go private modules, default is 'github.com/progress-platform-services/*
 
       # if version specified, it takes precedence; can be a semver like 1.0.2-xyz or a tag like "latest"
-      version: '20251014' # ${{ github.event.repository.version }}
-      detect-version-source-type: 'none' # options include "none" (do not detect), "file", "github-tag" or "github-release"
-      detect-version-source-parameter: '' # use for file name
-      language: 'rust'  # Go, Ruby, Rust, JavaScript, TypeScript, Python, Java, C#, PHP, other - used for build and SonarQube language setting
+      # version is sourced from the repo VERSION file to keep BlackDuck/SBOM steps aligned
+      detect-version-source-type: 'file' # options include "none" (do not detect), "file", "github-tag" or "github-release"
+      detect-version-source-parameter: 'VERSION' # filename to read the version from      language: 'rust'  # Go, Ruby, Rust, JavaScript, TypeScript, Python, Java, C#, PHP, other - used for build and SonarQube language setting
 
       # complexity-checks
       perform-complexity-checks: true