From a1e140a89e7a5e4f6cfd12f187e7e3a36ed6373a Mon Sep 17 00:00:00 2001
From: Emilien Escalle <emilien.escalle@escemi.com>
Date: Tue, 10 Nov 2026 22:05:27 +0100
Subject: [PATCH] build(deps): update GitHub Actions and workflows

---
 .github/workflows/__greetings.yml                    |  2 +-
 .github/workflows/__main-ci.yml                      |  2 +-
 .github/workflows/__need-fix-to-issue.yml            |  2 +-
 .github/workflows/__prepare-release.yml              |  2 +-
 .github/workflows/__release.yml                      |  4 ++--
 .github/workflows/__semantic-pull-request.yml        |  2 +-
 .github/workflows/__shared-ci.yml                    |  2 +-
 .github/workflows/__stale.yml                        |  2 +-
 .../__test-workflow-continuous-integration.yml       |  2 +-
 .github/workflows/continuous-integration.md          | 10 +++++-----
 .github/workflows/continuous-integration.yml         | 12 ++++++------
 actions/build/README.md                              |  2 +-
 actions/build/action.yml                             |  2 +-
 actions/dependencies-cache/README.md                 |  2 +-
 actions/dependencies-cache/action.yml                |  2 +-
 actions/get-package-manager/README.md                |  2 +-
 actions/get-package-manager/action.yml               |  2 +-
 actions/has-installed-dependencies/README.md         |  2 +-
 actions/has-installed-dependencies/action.yml        |  2 +-
 actions/lint/README.md                               |  2 +-
 actions/lint/action.yml                              |  4 ++--
 actions/package/create/README.md                     |  4 ++--
 actions/package/create/action.yml                    |  2 +-
 actions/release/draft/README.md                      |  2 +-
 actions/release/draft/action.yml                     |  4 ++--
 actions/release/finalize/README.md                   |  2 +-
 actions/release/finalize/action.yml                  |  2 +-
 actions/release/prepare/README.md                    |  2 +-
 actions/release/prepare/action.yml                   |  2 +-
 actions/release/verify/README.md                     |  2 +-
 actions/release/verify/action.yml                    |  2 +-
 actions/setup-node/README.md                         |  2 +-
 actions/setup-node/action.yml                        |  2 +-
 actions/test/README.md                               |  2 +-
 actions/test/action.yml                              |  8 ++++----
 35 files changed, 51 insertions(+), 51 deletions(-)

diff --git a/.github/workflows/__greetings.yml b/.github/workflows/__greetings.yml
index ceb7700..0204ddb 100644
--- a/.github/workflows/__greetings.yml
+++ b/.github/workflows/__greetings.yml
@@ -10,7 +10,7 @@ permissions: {}
 
 jobs:
   greetings:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
     permissions:
       contents: read
       issues: write
diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml
index 70244c8..b1539df 100644
--- a/.github/workflows/__main-ci.yml
+++ b/.github/workflows/__main-ci.yml
@@ -35,7 +35,7 @@ jobs:
   release:
     needs: ci
     if: github.event_name != 'schedule'
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@704e6c786af0f5dfd84a8851e428bb36b6cf180f # 3.0.1
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@4193622a365c0ab0bcbd6645895fd2c3126b72ba # 3.0.2
     permissions:
       contents: read
     with:
diff --git a/.github/workflows/__need-fix-to-issue.yml b/.github/workflows/__need-fix-to-issue.yml
index d1a9c19..a855f70 100644
--- a/.github/workflows/__need-fix-to-issue.yml
+++ b/.github/workflows/__need-fix-to-issue.yml
@@ -18,7 +18,7 @@ permissions: {}
 
 jobs:
   main:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
     permissions:
       contents: read
       issues: write
diff --git a/.github/workflows/__prepare-release.yml b/.github/workflows/__prepare-release.yml
index b85d128..f199c71 100644
--- a/.github/workflows/__prepare-release.yml
+++ b/.github/workflows/__prepare-release.yml
@@ -10,7 +10,7 @@ permissions: {}
 
 jobs:
   release:
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml@704e6c786af0f5dfd84a8851e428bb36b6cf180f # 3.0.1
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/prepare-release.yml@4193622a365c0ab0bcbd6645895fd2c3126b72ba # 3.0.2
     permissions:
       contents: read
       pull-requests: write
diff --git a/.github/workflows/__release.yml b/.github/workflows/__release.yml
index 895d9e1..73fef94 100644
--- a/.github/workflows/__release.yml
+++ b/.github/workflows/__release.yml
@@ -53,7 +53,7 @@ jobs:
 
       - name: Plan release
         id: plan-release
-        uses: hoverkraft-tech/ci-github-publish/actions/release/plan@704e6c786af0f5dfd84a8851e428bb36b6cf180f # 3.0.1
+        uses: hoverkraft-tech/ci-github-publish/actions/release/plan@4193622a365c0ab0bcbd6645895fd2c3126b72ba # 3.0.2
         with:
           target-ref: ${{ github.sha }}
           force: ${{ github.event_name == 'workflow_dispatch' && inputs.force }}
@@ -61,7 +61,7 @@ jobs:
 
       - name: Create and publish release
         if: steps.plan-release.outputs.should-release == 'true' && steps.plan-release.outputs.tag != ''
-        uses: hoverkraft-tech/ci-github-publish/actions/release/create@704e6c786af0f5dfd84a8851e428bb36b6cf180f # 3.0.1
+        uses: hoverkraft-tech/ci-github-publish/actions/release/create@4193622a365c0ab0bcbd6645895fd2c3126b72ba # 3.0.2
         env:
           OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }} # zizmor: ignore[secrets-outside-env] repository secret is scoped to the release summary step
         with:
diff --git a/.github/workflows/__semantic-pull-request.yml b/.github/workflows/__semantic-pull-request.yml
index 8453f03..2b1fe88 100644
--- a/.github/workflows/__semantic-pull-request.yml
+++ b/.github/workflows/__semantic-pull-request.yml
@@ -14,4 +14,4 @@ jobs:
   main:
     permissions:
       contents: read
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
diff --git a/.github/workflows/__shared-ci.yml b/.github/workflows/__shared-ci.yml
index 3ddaf3b..3969241 100644
--- a/.github/workflows/__shared-ci.yml
+++ b/.github/workflows/__shared-ci.yml
@@ -7,7 +7,7 @@ permissions: {}
 
 jobs:
   linter:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
     permissions:
       actions: read
       contents: read
diff --git a/.github/workflows/__stale.yml b/.github/workflows/__stale.yml
index 155e279..75286d3 100644
--- a/.github/workflows/__stale.yml
+++ b/.github/workflows/__stale.yml
@@ -8,7 +8,7 @@ permissions: {}
 
 jobs:
   main:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
     permissions:
       issues: write
       pull-requests: write
diff --git a/.github/workflows/__test-workflow-continuous-integration.yml b/.github/workflows/__test-workflow-continuous-integration.yml
index 4b3d13d..81719ba 100644
--- a/.github/workflows/__test-workflow-continuous-integration.yml
+++ b/.github/workflows/__test-workflow-continuous-integration.yml
@@ -325,7 +325,7 @@ jobs:
       issues: read
       packages: write
       pull-requests: read
-    uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@5ffc3c81daacc57700a14bb91d67edbc67eedc1d # 0.39.0
+    uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@ec1cd960fb1a1908ac21680756eb49a4c8f018d5 # 0.40.0
     with:
       sign: false
       attest: false
diff --git a/.github/workflows/continuous-integration.md b/.github/workflows/continuous-integration.md
index 2646999..63e3a10 100644
--- a/.github/workflows/continuous-integration.md
+++ b/.github/workflows/continuous-integration.md
@@ -58,7 +58,7 @@ on:
 permissions: {}
 jobs:
   continuous-integration:
-    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
     permissions:
       contents: read
       id-token: write
@@ -473,7 +473,7 @@ on:
 
 jobs:
   continuous-integration:
-    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
     permissions:
       id-token: write
       security-events: write
@@ -539,7 +539,7 @@ jobs:
   # Run CI checks inside the Docker container
   continuous-integration:
     needs: build-image
-    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
     permissions:
       id-token: write
       security-events: write
@@ -563,7 +563,7 @@ on:
     branches: [main]
 jobs:
   continuous-integration:
-    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
     permissions:
       id-token: write
       security-events: write
@@ -591,7 +591,7 @@ on:
 
 jobs:
   continuous-integration:
-    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+    uses: hoverkraft-tech/ci-github-nodejs/.github/workflows/continuous-integration.yml@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
     permissions:
       id-token: write
       security-events: write
diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml
index 09f0874..df04336 100644
--- a/.github/workflows/continuous-integration.yml
+++ b/.github/workflows/continuous-integration.yml
@@ -490,7 +490,7 @@ jobs:
       security-events: write
     runs-on: *ci-runner
     steps:
-      - uses: hoverkraft-tech/ci-github-common/actions/checkout@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      - uses: hoverkraft-tech/ci-github-common/actions/checkout@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       - id: code-ql-options
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
@@ -533,7 +533,7 @@ jobs:
       contents: read
     runs-on: *ci-runner
     steps:
-      - uses: hoverkraft-tech/ci-github-common/actions/checkout@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      - uses: hoverkraft-tech/ci-github-common/actions/checkout@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       - uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0
 
   lint:
@@ -553,7 +553,7 @@ jobs:
       contents: read
       packages: read
     steps:
-      - uses: hoverkraft-tech/ci-github-common/actions/checkout@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      - uses: hoverkraft-tech/ci-github-common/actions/checkout@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
         if: inputs.container == ''
 
       - id: preparel-lint-options
@@ -601,7 +601,7 @@ jobs:
     outputs:
       artifact-id: ${{ steps.build.outputs.artifact-id }}
     steps:
-      - uses: hoverkraft-tech/ci-github-common/actions/checkout@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      - uses: hoverkraft-tech/ci-github-common/actions/checkout@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
         if: inputs.container == ''
 
       - id: build-artifact
@@ -651,7 +651,7 @@ jobs:
       packages: read
       pull-requests: write
     steps:
-      - uses: hoverkraft-tech/ci-github-common/actions/checkout@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      - uses: hoverkraft-tech/ci-github-common/actions/checkout@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
         if: inputs.container == ''
 
       - if: needs.build.outputs.artifact-id && inputs.container == ''
@@ -723,7 +723,7 @@ jobs:
         with:
           persist-credentials: false
       - id: working-directory
-        uses: hoverkraft-tech/ci-github-common/actions/working-directory@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+        uses: hoverkraft-tech/ci-github-common/actions/working-directory@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
         with:
           working-directory: ${{ needs.prepare.outputs.working-directory }}
       - id: packages
diff --git a/actions/build/README.md b/actions/build/README.md
index 66de709..07dcdeb 100644
--- a/actions/build/README.md
+++ b/actions/build/README.md
@@ -35,7 +35,7 @@ Action to build Node.js projects with support for custom commands, environment v
 ## Usage
 
 ````yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/build@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+- uses: hoverkraft-tech/ci-github-nodejs/actions/build@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
   with:
     # Disable project and dependency lifecycle scripts during installation.
     # Set false to allow installation hooks, subject to the package manager's script approval settings.
diff --git a/actions/build/action.yml b/actions/build/action.yml
index d4666f4..e5390b1 100644
--- a/actions/build/action.yml
+++ b/actions/build/action.yml
@@ -74,7 +74,7 @@ runs:
   steps:
     # jscpd:ignore-start
     - id: working-directory
-      uses: hoverkraft-tech/ci-github-common/actions/working-directory@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      uses: hoverkraft-tech/ci-github-common/actions/working-directory@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       with:
         working-directory: ${{ inputs.working-directory }}
         enforce-path-in-workspace: ${{ inputs.container == 'true' && 'false' || 'true' }}
diff --git a/actions/dependencies-cache/README.md b/actions/dependencies-cache/README.md
index ab5a55b..4764fdd 100644
--- a/actions/dependencies-cache/README.md
+++ b/actions/dependencies-cache/README.md
@@ -45,7 +45,7 @@ Action to setup dependencies cache management.
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/dependencies-cache@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+- uses: hoverkraft-tech/ci-github-nodejs/actions/dependencies-cache@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
   with:
     # List of dependencies for which the cache should be managed.
     # This input is required.
diff --git a/actions/dependencies-cache/action.yml b/actions/dependencies-cache/action.yml
index 80fd799..8272993 100644
--- a/actions/dependencies-cache/action.yml
+++ b/actions/dependencies-cache/action.yml
@@ -34,7 +34,7 @@ runs:
   steps:
     # jscpd:ignore-start
     - id: working-directory
-      uses: hoverkraft-tech/ci-github-common/actions/working-directory@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      uses: hoverkraft-tech/ci-github-common/actions/working-directory@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       with:
         working-directory: ${{ inputs.working-directory }}
         enforce-path-in-workspace: "false"
diff --git a/actions/get-package-manager/README.md b/actions/get-package-manager/README.md
index 4a75b39..69e0406 100644
--- a/actions/get-package-manager/README.md
+++ b/actions/get-package-manager/README.md
@@ -34,7 +34,7 @@ Action to detect the package manager used. Supports Yarn, pnpm, and npm
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/get-package-manager@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+- uses: hoverkraft-tech/ci-github-nodejs/actions/get-package-manager@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
   with:
     # Working directory where the dependencies are installed.
     # Can be absolute or relative to the repository root.
diff --git a/actions/get-package-manager/action.yml b/actions/get-package-manager/action.yml
index 9d86bbb..9ed4a94 100644
--- a/actions/get-package-manager/action.yml
+++ b/actions/get-package-manager/action.yml
@@ -37,7 +37,7 @@ runs:
   using: "composite"
   steps:
     - id: working-directory
-      uses: hoverkraft-tech/ci-github-common/actions/working-directory@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      uses: hoverkraft-tech/ci-github-common/actions/working-directory@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       with:
         working-directory: ${{ inputs.working-directory }}
         enforce-path-in-workspace: "false"
diff --git a/actions/has-installed-dependencies/README.md b/actions/has-installed-dependencies/README.md
index cd99ff4..dd9a158 100644
--- a/actions/has-installed-dependencies/README.md
+++ b/actions/has-installed-dependencies/README.md
@@ -34,7 +34,7 @@ Action to check if dependencies have been installed according to the package man
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/has-installed-dependencies@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+- uses: hoverkraft-tech/ci-github-nodejs/actions/has-installed-dependencies@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
   with:
     # The dependencies to check.
     # This input is required.
diff --git a/actions/has-installed-dependencies/action.yml b/actions/has-installed-dependencies/action.yml
index 4bdeb24..87b25ec 100644
--- a/actions/has-installed-dependencies/action.yml
+++ b/actions/has-installed-dependencies/action.yml
@@ -26,7 +26,7 @@ runs:
   steps:
     # jscpd:ignore-start
     - id: working-directory
-      uses: hoverkraft-tech/ci-github-common/actions/working-directory@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      uses: hoverkraft-tech/ci-github-common/actions/working-directory@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       with:
         working-directory: ${{ inputs.working-directory }}
         enforce-path-in-workspace: "false"
diff --git a/actions/lint/README.md b/actions/lint/README.md
index 664afd0..d860f2f 100644
--- a/actions/lint/README.md
+++ b/actions/lint/README.md
@@ -35,7 +35,7 @@ Action to lint Node.js projects with support for pull request reporting and anno
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/lint@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+- uses: hoverkraft-tech/ci-github-nodejs/actions/lint@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
   with:
     # Disable project and dependency lifecycle scripts during installation.
     # Set false to allow installation hooks, subject to the package manager's script approval settings.
diff --git a/actions/lint/action.yml b/actions/lint/action.yml
index 9530854..e8b4dc8 100644
--- a/actions/lint/action.yml
+++ b/actions/lint/action.yml
@@ -54,7 +54,7 @@ runs:
   steps:
     # jscpd:ignore-start
     - id: working-directory
-      uses: hoverkraft-tech/ci-github-common/actions/working-directory@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      uses: hoverkraft-tech/ci-github-common/actions/working-directory@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       with:
         working-directory: ${{ inputs.working-directory }}
         enforce-path-in-workspace: ${{ inputs.container == 'true' && 'false' || 'true' }}
@@ -113,7 +113,7 @@ runs:
 
     - name: 📊 Parse lint reports
       if: always()
-      uses: hoverkraft-tech/ci-github-common/actions/quality/parse-ci-reports@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      uses: hoverkraft-tech/ci-github-common/actions/quality/parse-ci-reports@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       with:
         working-directory: ${{ steps.working-directory.outputs.absolute-path }}
         report-paths: ${{ inputs.report-file || 'auto:lint' }}
diff --git a/actions/package/create/README.md b/actions/package/create/README.md
index 490cc04..9544d02 100644
--- a/actions/package/create/README.md
+++ b/actions/package/create/README.md
@@ -37,7 +37,7 @@ Packaging never installs dependencies, changes versions or runs lifecycle script
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/package/create@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+- uses: hoverkraft-tech/ci-github-nodejs/actions/package/create@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
   with:
     # Prepared project directory containing the package manager configuration.
     # Can be absolute or relative to the repository root.
@@ -113,7 +113,7 @@ jobs:
       package-tarball-artifact-id: ${{ steps.package.outputs.package-tarball-artifact-id }}
     steps:
       - id: package
-        uses: hoverkraft-tech/ci-github-nodejs/actions/package/create@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+        uses: hoverkraft-tech/ci-github-nodejs/actions/package/create@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
 
   consume:
     needs: package
diff --git a/actions/package/create/action.yml b/actions/package/create/action.yml
index aa6968e..726b5dd 100644
--- a/actions/package/create/action.yml
+++ b/actions/package/create/action.yml
@@ -65,7 +65,7 @@ runs:
 
     # jscpd:ignore-start
     - id: working-directory
-      uses: hoverkraft-tech/ci-github-common/actions/working-directory@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      uses: hoverkraft-tech/ci-github-common/actions/working-directory@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       with:
         working-directory: ${{ inputs.working-directory }}
         enforce-path-in-workspace: "false"
diff --git a/actions/release/draft/README.md b/actions/release/draft/README.md
index 4ac7903..16d1d1d 100644
--- a/actions/release/draft/README.md
+++ b/actions/release/draft/README.md
@@ -81,7 +81,7 @@ This documentation was automatically generated by [CI Dokumentor](https://github
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/release/draft@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+- uses: hoverkraft-tech/ci-github-nodejs/actions/release/draft@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
   with:
     # Optional partial release configuration as a YAML or JSON mapping, forwarded to ci-github-publish/actions/release/create.
     # See https://github.com/hoverkraft-tech/ci-github-publish/tree/main/actions/release/create for supported settings and override behavior.
diff --git a/actions/release/draft/action.yml b/actions/release/draft/action.yml
index bae0c42..08ffdfb 100644
--- a/actions/release/draft/action.yml
+++ b/actions/release/draft/action.yml
@@ -34,7 +34,7 @@ runs:
         persist-credentials: false
     - id: configuration
       if: inputs.package-name != ''
-      uses: hoverkraft-tech/ci-github-publish/actions/release/get-configuration@704e6c786af0f5dfd84a8851e428bb36b6cf180f # 3.0.1
+      uses: hoverkraft-tech/ci-github-publish/actions/release/get-configuration@4193622a365c0ab0bcbd6645895fd2c3126b72ba # 3.0.2
       with:
         working-directory: ${{ inputs.working-directory }}
     - id: independent-configuration
@@ -83,7 +83,7 @@ runs:
             );
           await io.mkdirP(path.dirname(destination));
           fs.writeFileSync(destination, configuration);
-    - uses: hoverkraft-tech/ci-github-publish/actions/release/create@704e6c786af0f5dfd84a8851e428bb36b6cf180f # 3.0.1
+    - uses: hoverkraft-tech/ci-github-publish/actions/release/create@4193622a365c0ab0bcbd6645895fd2c3126b72ba # 3.0.2
       with:
         config-overrides: ${{ inputs.release-config }}
         tag: ${{ inputs.tag }}
diff --git a/actions/release/finalize/README.md b/actions/release/finalize/README.md
index bf6c2d3..c5710dc 100644
--- a/actions/release/finalize/README.md
+++ b/actions/release/finalize/README.md
@@ -75,7 +75,7 @@ This documentation was automatically generated by [CI Dokumentor](https://github
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/release/finalize@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+- uses: hoverkraft-tech/ci-github-nodejs/actions/release/finalize@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
   with:
     # Committed release tag.
     # This input is required.
diff --git a/actions/release/finalize/action.yml b/actions/release/finalize/action.yml
index dc3a72d..fa9a983 100644
--- a/actions/release/finalize/action.yml
+++ b/actions/release/finalize/action.yml
@@ -44,7 +44,7 @@ runs:
         name: release-pending-assets-${{ steps.assets.outputs.release-id }}-${{ github.run_id }}-${{ github.run_attempt }}
         path: ${{ steps.assets.outputs.pending-directory }}/*.tgz
         if-no-files-found: error
-    - uses: hoverkraft-tech/ci-github-publish/actions/release/update@704e6c786af0f5dfd84a8851e428bb36b6cf180f # 3.0.1
+    - uses: hoverkraft-tech/ci-github-publish/actions/release/update@4193622a365c0ab0bcbd6645895fd2c3126b72ba # 3.0.2
       if: steps.assets.outputs.published != 'true'
       with:
         tag: ${{ inputs.tag }}
diff --git a/actions/release/prepare/README.md b/actions/release/prepare/README.md
index e26d948..ea69f24 100644
--- a/actions/release/prepare/README.md
+++ b/actions/release/prepare/README.md
@@ -88,7 +88,7 @@ This documentation was automatically generated by [CI Dokumentor](https://github
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/release/prepare@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+- uses: hoverkraft-tech/ci-github-nodejs/actions/release/prepare@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
   with:
     # Optional partial release configuration as a YAML or JSON mapping, forwarded to ci-github-publish/actions/release/plan.
     # See https://github.com/hoverkraft-tech/ci-github-publish/tree/main/actions/release/plan for supported settings and override behavior.
diff --git a/actions/release/prepare/action.yml b/actions/release/prepare/action.yml
index 6666d9b..cd9ad96 100644
--- a/actions/release/prepare/action.yml
+++ b/actions/release/prepare/action.yml
@@ -68,7 +68,7 @@ runs:
     - name: Plan release with HoverKraft
       id: plan
       if: steps.inspect.outputs.tag == '' && steps.inspect.outputs.independent != 'true'
-      uses: hoverkraft-tech/ci-github-publish/actions/release/plan@704e6c786af0f5dfd84a8851e428bb36b6cf180f # 3.0.1
+      uses: hoverkraft-tech/ci-github-publish/actions/release/plan@4193622a365c0ab0bcbd6645895fd2c3126b72ba # 3.0.2
       with:
         github-token: ${{ inputs.github-token }}
         target-ref: ${{ github.sha }}
diff --git a/actions/release/verify/README.md b/actions/release/verify/README.md
index 47a8e6f..f7c0de8 100644
--- a/actions/release/verify/README.md
+++ b/actions/release/verify/README.md
@@ -84,7 +84,7 @@ This documentation was automatically generated by [CI Dokumentor](https://github
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/release/verify@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+- uses: hoverkraft-tech/ci-github-nodejs/actions/release/verify@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
   with:
     # JSON package list from release preparation.
     # This input is required.
diff --git a/actions/release/verify/action.yml b/actions/release/verify/action.yml
index 1ac2d34..b1351d2 100644
--- a/actions/release/verify/action.yml
+++ b/actions/release/verify/action.yml
@@ -45,7 +45,7 @@ runs:
           core.setOutput('releases', releases);
           core.setOutput('packages', packages);
     - id: identity
-      uses: hoverkraft-tech/ci-github-publish/actions/release/verify@704e6c786af0f5dfd84a8851e428bb36b6cf180f # 3.0.1
+      uses: hoverkraft-tech/ci-github-publish/actions/release/verify@4193622a365c0ab0bcbd6645895fd2c3126b72ba # 3.0.2
       with:
         artifact-ids: ${{ steps.prepare.outputs.artifact-ids }}
         tags: ${{ steps.prepare.outputs.tags }}
diff --git a/actions/setup-node/README.md b/actions/setup-node/README.md
index 56ca10b..342f473 100644
--- a/actions/setup-node/README.md
+++ b/actions/setup-node/README.md
@@ -34,7 +34,7 @@ Action to setup Node.js and install dependencies according to the package manage
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+- uses: hoverkraft-tech/ci-github-nodejs/actions/setup-node@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
   with:
     # Install project dependencies after configuring Node.js and the package manager.
     # Set false when only tooling is needed, such as packaging prepared build files,
diff --git a/actions/setup-node/action.yml b/actions/setup-node/action.yml
index 94f6eb1..dbdfca7 100644
--- a/actions/setup-node/action.yml
+++ b/actions/setup-node/action.yml
@@ -59,7 +59,7 @@ runs:
         done
     # jscpd:ignore-start
     - id: working-directory
-      uses: hoverkraft-tech/ci-github-common/actions/working-directory@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      uses: hoverkraft-tech/ci-github-common/actions/working-directory@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       with:
         working-directory: ${{ inputs.working-directory }}
         enforce-path-in-workspace: "false"
diff --git a/actions/test/README.md b/actions/test/README.md
index e5fbcd1..41914cd 100644
--- a/actions/test/README.md
+++ b/actions/test/README.md
@@ -46,7 +46,7 @@ permissions:
 ## Usage
 
 ```yaml
-- uses: hoverkraft-tech/ci-github-nodejs/actions/test@02a04ad25ceaacdf3b7200e45fb7fec07fadf4fa # 2.1.0
+- uses: hoverkraft-tech/ci-github-nodejs/actions/test@fbd3522b68c55a6314aadbededaa487825ba9b35 # chore/update-actions-stable
   with:
     # Disable project and dependency lifecycle scripts during installation.
     # Set false to allow installation hooks, subject to the package manager's script approval settings.
diff --git a/actions/test/action.yml b/actions/test/action.yml
index bfc6ad2..b2e57ae 100644
--- a/actions/test/action.yml
+++ b/actions/test/action.yml
@@ -99,7 +99,7 @@ runs:
   steps:
     # jscpd:ignore-start
     - id: working-directory
-      uses: hoverkraft-tech/ci-github-common/actions/working-directory@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      uses: hoverkraft-tech/ci-github-common/actions/working-directory@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       with:
         working-directory: ${{ inputs.working-directory }}
         enforce-path-in-workspace: ${{ inputs.container == 'true' && 'false' || 'true' }}
@@ -160,7 +160,7 @@ runs:
     - name: 📊 Parse coverage reports
       if: always() && inputs.coverage == 'github'
       id: parse-coverage-reports
-      uses: hoverkraft-tech/ci-github-common/actions/quality/parse-ci-reports@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      uses: hoverkraft-tech/ci-github-common/actions/quality/parse-ci-reports@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       with:
         working-directory: ${{ steps.working-directory.outputs.absolute-path }}
         report-name: "Coverage Results"
@@ -170,7 +170,7 @@ runs:
 
     - name: 📊 Add coverage PR comment
       if: always() && inputs.comment == 'true' && inputs.coverage == 'github' && github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository && steps.parse-coverage-reports.outputs.markdown
-      uses: hoverkraft-tech/ci-github-common/actions/create-or-update-comment@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      uses: hoverkraft-tech/ci-github-common/actions/create-or-update-comment@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       with:
         title: "Code Coverage Report"
         token: ${{ inputs.github-token }}
@@ -178,7 +178,7 @@ runs:
 
     - name: 📊 Upload coverage to Codecov
       if: always() && inputs.coverage == 'codecov'
-      uses: hoverkraft-tech/ci-github-common/actions/quality/codecov@ce885f8dd6bf7191a79e3eebdf37bca805d40932 # 3.0.0
+      uses: hoverkraft-tech/ci-github-common/actions/quality/codecov@66882b24f9f13e45a6541896a5a7c638cb91c94c # 4.0.0
       with:
         working-directory: ${{ steps.working-directory.outputs.absolute-path }}