Merge pull request #55 from sayurin:actions

Update GitHub Actions and dependencies for consistency

Author: sayurin

.github/workflows/release.yml

@@ -13,7 +13,9 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
 
       - name: Validate version format
         run: |
@@ -35,22 +37,25 @@ jobs:
             custom_components/echonet_lite/manifest.json
 
       - name: Commit and tag
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         run: |
           git config user.name "github-actions[bot]"
           git config user.email "github-actions[bot]@users.noreply.github.com"
           git add custom_components/echonet_lite/manifest.json
           git commit -m "Release v${{ inputs.version }}"
           git tag "v${{ inputs.version }}"
-          git push origin HEAD --tags
+          git push "https://x-access-token:${GITHUB_TOKEN}@github.com/${{ github.repository }}.git" HEAD --tags
 
       - name: ZIP echonet_lite Dir
         run: |
           cd ${{ github.workspace }}/custom_components/echonet_lite
           zip echonet_lite.zip -r ./
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v3
+        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
         with:
           tag_name: "v${{ inputs.version }}"
           generate_release_notes: true
+          prerelease: true
           files: ${{ github.workspace }}/custom_components/echonet_lite/echonet_lite.zip

.github/workflows/validate.yml

@@ -5,15 +5,17 @@ on:
   pull_request:
   workflow_dispatch:
   schedule:
-    - cron: '0 0 * * *'
+    - cron: "0 0 * * *"
 jobs:
   validation:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
       - name: HACS validation
-        uses: hacs/action@main
+        uses: hacs/action@1ebf01c408f29afcb6406bd431bc98fd8cbb15aa # main
         with:
           category: integration
       - name: Hassfest validation
-        uses: home-assistant/actions/hassfest@master
+        uses: home-assistant/actions/hassfest@e91ad1948e57189485b9c1ad608af0c303946f89 # master