fix: address review comments - normalize version comparison, add checkout to validate job, combine find commands, improve lock action error handling

Agent-Logs-Url: https://github.com/petesramek/polyline-algorithm-csharp/sessions/4418acb6-8233-47f4-9b0f-9f6f4de0fb09

Co-authored-by: petesramek <2333452+petesramek@users.noreply.github.com>

Author: Copilot

.github/actions/github/branch-protection/lock/action.yml

@@ -14,7 +14,7 @@ runs:
       env:
         GH_TOKEN: ${{ github.token }}
       run: |
-        gh api --method PUT /repos/${{ github.repository }}/branches/${{ inputs.branch }}/protection \
+        if ! gh api --method PUT /repos/${{ github.repository }}/branches/${{ inputs.branch }}/protection \
           --input - << 'EOF'
         {
           "required_status_checks": null,
@@ -30,4 +30,8 @@ runs:
           "lock_branch": false
         }
         EOF
+        then
+          echo "::error::Failed to apply branch protection to '${{ inputs.branch }}'. Ensure the token has 'administration: write' permission and the branch exists."
+          exit 1
+        fi
         echo "🔒 Branch '${{ inputs.branch }}' is now protected." >> $GITHUB_STEP_SUMMARY

.github/workflows/bump-version.yml

@@ -72,6 +72,12 @@ jobs:
     needs: [detect-version]
     runs-on: ubuntu-latest
     steps:
+      - name: 'Checkout main'
+        uses: actions/checkout@v6
+        with:
+          ref: main
+          fetch-depth: 1
+
       - name: 'Validate workflow is running from main'
         if: ${{ github.ref_name != 'main' }}
         run: |
@@ -119,11 +125,7 @@ jobs:
       - name: 'Reset PublicAPI files for major bump'
         if: ${{ inputs.bump-type == 'major' }}
         run: |
-          find . -name "PublicAPI.Shipped.txt" | while read file; do
-            printf '\xef\xbb\xbf#nullable enable\n' > "$file"
-            echo "Reset: $file"
-          done
-          find . -name "PublicAPI.Unshipped.txt" | while read file; do
+          find . \( -name "PublicAPI.Shipped.txt" -o -name "PublicAPI.Unshipped.txt" \) | while read file; do
             printf '\xef\xbb\xbf#nullable enable\n' > "$file"
             echo "Reset: $file"
           done

.github/workflows/release.yml

@@ -278,9 +278,10 @@ jobs:
         run: |
           git fetch origin
           latest_version=$(git ls-remote --heads origin 'release/*' | grep -oP 'release/\K\d+\.\d+' | sort -V | tail -1)
+          current_version=$(echo "${{ env.current-version }}" | grep -oP '^\d+\.\d+')
           echo "Latest release branch version: $latest_version"
-          echo "Current version: ${{ env.current-version }}"
-          if [[ "$latest_version" == "${{ env.current-version }}" ]]; then
+          echo "Current version (normalized): $current_version"
+          if [[ "$latest_version" == "$current_version" ]]; then
             echo "is-latest=true" >> $GITHUB_OUTPUT
           else
             echo "is-latest=false" >> $GITHUB_OUTPUT