Use nuget.org Trusted Publishing in Build and Publish workflow

.github/workflows/Build and Publish.yml

@@ -6,7 +6,6 @@ on:
 
 env:
   GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-  NUGET_API_KEY: ${{ secrets.NUGET_API_KEY }}
 
 concurrency:
   group: build-publish-${{ github.ref }}
@@ -23,18 +22,30 @@ jobs:
     timeout-minutes: 10
     name: '2 / Publish'
 
+    permissions:
+      contents: write
+      id-token: write
+
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Setup dotnet
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: |
           6.0.x
           8.0.x
           10.0.x
 
+    - name: NuGet login
+      id: nuget-login
+      uses: NuGet/login@v1
+      with:
+        user: ${{ secrets.NUGET_USER }}
+
     - name: Build
+      env:
+        NUGET_API_KEY: ${{ steps.nuget-login.outputs.NUGET_API_KEY }}
       run: |
         if ($env:GITHUB_REF -eq "refs/heads/main") {
           .\build.ps1 -Target Publish

.github/workflows/PR Validation.yml

@@ -25,10 +25,10 @@ jobs:
     name: '3 / Build'
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
 
     - name: Setup dotnet
-      uses: actions/setup-dotnet@v4
+      uses: actions/setup-dotnet@v5
       with:
         dotnet-version: |
           6.0.x

.github/workflows/integration-tests.yml

@@ -41,15 +41,15 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Setup .NET
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: '10.0.x'
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
           node-version: '22'
 
@@ -101,7 +101,7 @@ jobs:
 
       - name: Upload raw test results
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: test-results-${{ matrix.os }}-electron-${{ matrix.electronVersion }}
           path: test-results/*.trx
@@ -122,12 +122,12 @@ jobs:
 
     steps:
       - name: Download all test results
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v7
         with:
           path: test-results
 
       - name: Setup .NET (for CTRF conversion)
-        uses: actions/setup-dotnet@v4
+        uses: actions/setup-dotnet@v5
         with:
           dotnet-version: '10.0.x'
 
@@ -210,7 +210,7 @@ jobs:
 
       - name: Upload PR Number Artifact
         if: github.event_name == 'pull_request'
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: pr_number
           path: pr_number.txt

.github/workflows/pr-comment.yml

@@ -18,15 +18,15 @@ jobs:
 
     steps:
       - name: Download CTRF artifact
-        uses: dawidd6/action-download-artifact@v8
+        uses: dawidd6/action-download-artifact@v17
         with:
           github_token: ${{ github.token }}
           run_id: ${{ github.event.workflow_run.id }}
           name: ctrf-report
           path: ctrf
 
       - name: Download PR Number Artifact
-        uses: dawidd6/action-download-artifact@v8
+        uses: dawidd6/action-download-artifact@v17
         with:
           github_token: ${{ github.token }}
           run_id: ${{ github.event.workflow_run.id }}

.github/workflows/publish-wiki.yml

@@ -12,7 +12,7 @@ jobs:
   publish-wiki:
     runs-on: windows-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v5
       - name: Remove level 1 headings from Markdown files
         shell: bash
         run: |

.github/workflows/trailing-whitespace-check.yml

@@ -11,7 +11,7 @@ jobs:
 
     steps:
     - name: Checkout code
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         fetch-depth: 0