Revert PythonBot workflow and script to original version to restore stability

Signed-off-by: Abhijeet Saharan <abhijeetsaharan2236@gmail.com>

Author: Abhijeet2409

.github/scripts/bot-workflows.js

@@ -112,6 +112,12 @@ const REPO = process.env.REPO || process.env.GITHUB_REPOSITORY || '';
 let DRY_RUN = normaliseDryRun(process.env.DRY_RUN || '1');
 let PR_NUMBER = process.env.PR_NUMBER || '';
 
+// Validate workflow name contains only safe characters
+if (FAILED_WORKFLOW_NAME && !/^[\w\s\-\.]+$/.test(FAILED_WORKFLOW_NAME)) {
+  console.error(`ERROR: FAILED_WORKFLOW_NAME contains invalid characters: ${FAILED_WORKFLOW_NAME}`);
+  process.exit(1);
+}
+
 // Set GH_TOKEN environment variable for gh CLI
 if (GH_TOKEN) {
   process.env.GH_TOKEN = GH_TOKEN;
@@ -335,4 +341,4 @@ if (DRY_RUN === 1) {
 console.log('------------------------------------------------------------');
 console.log(' Workflow Failure Notifier Complete');
 console.log(` DRY_RUN: ${DRY_RUN}`);
-console.log('------------------------------------------------------------');
+console.log('------------------------------------------------------------');

.github/workflows/bot-workflows.yml

@@ -35,18 +35,18 @@ jobs:
       DRY_RUN: ${{ github.event_name == 'workflow_dispatch' && (github.event.inputs.dry_run == 'true' && '1' || '0') || '0' }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
+        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
         with:
           egress-policy: audit
 
       - name: Checkout repository
         uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       - name: Setup Node.js
-        uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: '20'
-          
+
       - name: Notify PR of workflow failure
         if: github.event_name != 'workflow_dispatch' || github.event.inputs.failed_run_id != ''
         env: