Merge branch 'main' into chore/calm-studio-npm-workspaces

Author: rocketstack-matt

.github/CODEOWNERS

@@ -1,6 +1,6 @@
 * @finos/architecture-as-code-maintainers
 
-/calm/ @finos/calm-schema-governance  @markscott-ms
+/calm/ @finos/calm-schema-governance
 
 /calm-hub/ @jpgough-ms @rocketstack-matt @grahampacker-ms @Thels @markscott-ms @willosborne
 

.github/workflows/automated-release-calm-server.yml

@@ -432,7 +432,7 @@ jobs:
       contains(github.event.pull_request.labels.*.name, 'automated-release')
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2
+        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2
         with:
           egress-policy: audit
 

.github/workflows/automated-release-calm-studio.yml

@@ -29,7 +29,7 @@ jobs:
                   persist-credentials: false
 
             - name: Setup Node.js
-              uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
               with:
                   node-version: 24
                   cache: npm

.github/workflows/automated-release.yml

@@ -436,7 +436,7 @@ jobs:
       contains(github.event.pull_request.labels.*.name, 'automated-release')
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2
+        uses: step-security/harden-runner@ab7a9404c0f3da075243ca237b5fac12c98deaa5 # v2
         with:
           egress-policy: audit
 

.github/workflows/build-and-sync-advent.yml

@@ -30,7 +30,7 @@ jobs:
               working-directory: "advent-of-calm/website"
 
             - name: Configure AWS credentials
-              uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6
+              uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6
               with:
                   aws-access-key-id: ${{ secrets.AWS_S3_ACCESS_KEY }}
                   aws-secret-access-key: ${{ secrets.AWS_S3_SECRET_ACCESS_KEY }}

.github/workflows/build-calm-guard.yml

@@ -32,7 +32,7 @@ jobs:
               uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
             - name: Setup Node.js
-              uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
               with:
                   node-version: 24
                   cache: npm
@@ -56,7 +56,7 @@ jobs:
               uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
             - name: Setup Node.js
-              uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
               with:
                   node-version: 24
                   cache: npm
@@ -79,7 +79,7 @@ jobs:
               uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
             - name: Setup Node.js
-              uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
               with:
                   node-version: 24
                   cache: npm

.github/workflows/build-calm-studio-desktop.yml

@@ -35,7 +35,7 @@ jobs:
                       triple: x86_64-pc-windows-msvc
         steps:
             - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-            - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
               with:
                   node-version: 24
                   cache: npm
@@ -82,7 +82,7 @@ jobs:
                       triple: x86_64-pc-windows-msvc
         steps:
             - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-            - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+            - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
               with:
                   node-version: 24
                   cache: npm

.github/workflows/build-calm-studio.yml

@@ -28,7 +28,7 @@ jobs:
               uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
             - name: Setup Node.js
-              uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
               with:
                   node-version: 24
                   cache: npm
@@ -77,7 +77,7 @@ jobs:
               uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
             - name: Setup Node.js
-              uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
+              uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
               with:
                   node-version: 24
                   cache: npm

.github/workflows/pr-labelling.yml

@@ -17,6 +17,6 @@ jobs:
               uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
 
             - name: Label PR based on changes
-              uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6
+              uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6
               with:
                   token: '${{ secrets.GITHUB_TOKEN }}'

.github/workflows/s3-docs-sync.yml

@@ -29,7 +29,7 @@ jobs:
               working-directory: "docs"
 
             - name: Configure AWS credentials
-              uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6
+              uses: aws-actions/configure-aws-credentials@d979d5b3a71173a29b74b5b88418bfda9437d885 # v6
               with:
                   aws-access-key-id: ${{ secrets.AWS_S3_ACCESS_KEY }}
                   aws-secret-access-key: ${{ secrets.AWS_S3_SECRET_ACCESS_KEY }}