Merge remote-tracking branch 'origin/main' into davidkna-sap_rm-pup

* origin/main:
  chore: Remove node 20 from build matrix (#6662)
  chore(deps-dev): bump @types/node from 22.19.19 to 22.19.20 (#6660)
  chore(deps): bump bignumber.js from 11.1.2 to 11.1.3 (#6659)
  chore(deps): bump github/codeql-action from 4.36.1 to 4.36.2 (#6658)
  chore(deps): bump rtCamp/action-slack-notify from 2.3.3 to 2.4.0 (#6657)
  Update dependabot.yml
  chore(deps): bump semver from 7.8.1 to 7.8.2 (#6656)
  chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#6649)
  chore(deps): bump @typescript-eslint/parser from 8.60.0 to 8.60.1 (#6654)
  chore(deps): bump typescript-eslint from 8.60.0 to 8.60.1 (#6651)
  chore(deps): bump memfs from 4.57.3 to 4.57.6 (#6655)
  chore(deps): bump axios from 1.16.1 to 1.17.0 (#6653)
  chore(deps): bump eslint-plugin-jsdoc from 63.0.0 to 63.0.1 (#6652)
  chore(deps): bump eslint-import-resolver-typescript from 4.4.4 to 4.4.5 (#6650)
  chore(deps): bump github/codeql-action from 4.36.0 to 4.36.1 (#6648)
  chore(deps): bump js-yaml from 4.1.1 to 4.2.0 (#6647)
  chore(deps): bump eslint-plugin-jsdoc from 62.9.0 to 63.0.0 (#6628)

Author: davidkna-sap

.github/actions/changesets-fixed-version-bump/index.js

@@ -3,7 +3,7 @@ registries:
   sap-artifactory:
     type: npm-registry
     url: https://common.repositories.cloud.sap/artifactory/api/npm/build.releases.npm/
-    token: ${{secrets.DBOT_NPM_TOKEN_ARTIFACTORY}}
+    token: ${{secrets.NPM_TOKEN_ARTIFACTORY}}
     replaces-base: true
 updates:
   - package-ecosystem: npm

.github/actions/check-public-api/index.js

@@ -43,4 +43,4 @@ jobs:
           SLACK_COLOR: ${{ job.status }}
           SLACK_MSG_AUTHOR: ' '
           SLACK_ICON: https://sap.github.io/cloud-sdk/img/logo.png
-        uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661 # v2.3.3
+        uses: rtCamp/action-slack-notify@33ca3be66c6f378fe1610fd1d5258632dbed5e58 # v2.4.0

.github/actions/merge-and-write-changelogs/index.js

@@ -38,7 +38,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node-version: [20, 22, 24]
+        node-version: [22, 24]
     steps:
       - uses: sap/cloud-sdk-js/.github/actions/setup@main
         with:
@@ -60,7 +60,7 @@ jobs:
           SLACK_COLOR: ${{ job.status }}
           SLACK_MSG_AUTHOR: ' '
           SLACK_ICON: https://sap.github.io/cloud-sdk/img/logo.png
-        uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661 # v2.3.3
+        uses: rtCamp/action-slack-notify@33ca3be66c6f378fe1610fd1d5258632dbed5e58 # v2.4.0
 
   checks:
     if: inputs.canary-release-skip-checks == false
@@ -103,7 +103,7 @@ jobs:
           SLACK_COLOR: ${{ job.status }}
           SLACK_MSG_AUTHOR: ' '
           SLACK_ICON: https://sap.github.io/cloud-sdk/img/logo.png
-        uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661 # v2.3.3
+        uses: rtCamp/action-slack-notify@33ca3be66c6f378fe1610fd1d5258632dbed5e58 # v2.4.0
 
   e2e-tests:
     if: inputs.canary-release-skip-checks == false

.github/dependabot.yml

@@ -15,7 +15,7 @@ jobs:
     permissions:
       contents: read
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
       - name: Collect changed files

.github/workflows/blackduck.yml

@@ -35,7 +35,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
@@ -44,7 +44,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
+        uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
         with:
           languages: ${{ matrix.language }}
           config-file: ./.github/codeql/codeql-config.yml
@@ -56,7 +56,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
+        uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -70,4 +70,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
+        uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2

.github/workflows/build.yml

@@ -13,7 +13,7 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false
       - uses: SAP/fosstars-rating-core-action@daf10c3920b53405f6013ee987e7015525fdec30 # v1.14.0
@@ -31,4 +31,4 @@ jobs:
           SLACK_COLOR: ${{ job.status }}
           SLACK_MSG_AUTHOR: ' '
           SLACK_ICON: https://sap.github.io/cloud-sdk/img/logo.png
-        uses: rtCamp/action-slack-notify@e31e87e03dd19038e411e38ae27cbad084a90661 # v2.3.3
+        uses: rtCamp/action-slack-notify@33ca3be66c6f378fe1610fd1d5258632dbed5e58 # v2.4.0

.github/workflows/check-pr.yml

@@ -18,7 +18,7 @@ jobs:
       actions: read
     steps:
       - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
         with:
           persist-credentials: false