Merge branch 'main' into bump-vsce-helper

Author: soumeh01

.github/workflows/ci.yml

@@ -304,18 +304,18 @@ jobs:
           egress-policy: audit
 
       - name: Download packages
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: vsix-package-*
 
       - name: Download coverage report
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: unit-test-coverage
           path: test-coverage
 
       - name: Download test report
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           pattern: test-report-linux
           path: test-report-linux

.github/workflows/nightly.yml

@@ -241,7 +241,7 @@ jobs:
         run: npm run build
 
       - name: Download VSIX package
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: vsix-package-win32-x64
 
@@ -270,7 +270,7 @@ jobs:
 
       - name: Publish Test Results
         if: always() && steps.tests.conclusion != 'skipped'
-        uses: dorny/test-reporter@b082adf0eced0765477756c2a610396589b8c637 # v2.5.0
+        uses: dorny/test-reporter@3d76b34a4535afbd0600d347b09a6ee5deb3ed7f # v2.6.0
         with:
           name: Playwright Tests
           path: e2e-report/results.xml