Update git semver workflows

Signed-off-by: Roger Barker <[email protected]>

Author: rbarker-dev

.github/workflows/main.yaml

@@ -5,41 +5,68 @@ on:
     branches: ["master", "main"]
     types:
       - completed
+
 permissions:
   contents: write
+
 jobs:
   version:
     name: Gather version information
     runs-on: ubuntu-latest
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
+
     outputs:
       latest_version: ${{ steps.latest_version.outputs.version }}
       next_version: ${{ steps.next_version.outputs.version }}
+
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout Code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
+          ref: ${{ github.ref }}
+
+      - name: Setup git-semver
+        uses: PandasWhoCode/setup-git-semver@b6b17c8e4e6b307d2a66fd93797a9d30e48836e1 # v1.0.4
+        with:
+          version: latest
+
       - name: Latest version
         id: latest_version
-        uses: PSanetra/git-semver-actions/latest@master
+        run: echo "version=$(git-semver --latest-version)" >> "${GITHUB_OUTPUT}"
+
       - name: Next version
         id: next_version
-        uses: PSanetra/git-semver-actions/next@master
+        run: echo "version=$(git-semver --next-version)" >> "${GITHUB_OUTPUT}"
+
   release:
     name: Release
     needs: version
     if: ${{ needs.version.outputs.latest_version != needs.version.outputs.next_version }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout Code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
+          ref: ${{ github.ref }}
+
+      - name: Setup git-semver
+        uses: PandasWhoCode/setup-git-semver@b6b17c8e4e6b307d2a66fd93797a9d30e48836e1 # v1.0.4
+        with:
+          version: latest
+
       - name: Generate Changelog
         id: generate_changelog
-        uses: PSanetra/git-semver-actions/markdown-log@master
+        env:
+          VERSION=${{ needs.version.outputs.next_version }}
+        run: |
+          changelog=$(git-semver log --markdown "${VERSION}")
+          echo "changelog<<EOF" >> $GITHUB_OUTPUT
+
       - name: Create Release
         id: create_release
-        uses: actions/create-release@v1
+        uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1.1.4
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
@@ -49,22 +76,31 @@ jobs:
             ${{ steps.generate_changelog.outputs.changelog }}
           draft: false # Tag must be published before gitreleaser is executed
           prerelease: false
+
   build_and_publish_artifacts:
     name: Build and publish artifacts
     needs: [version, release]
     if: ${{ needs.version.outputs.latest_version != needs.version.outputs.next_version }}
     runs-on: ubuntu-latest
+
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
-      - uses: docker/setup-qemu-action@v3
-      - uses: docker/setup-buildx-action@v3
-      - uses: docker/login-action@v3
-        name: Login to Docker Hub
+          ref: ${{ github.ref }}
+
+      - name: Setup QEMU
+        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
+
+      - name: Setup Docker Buildx
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
         with:
           username: ${{ vars.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
+
       - name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v6
         with:

.github/workflows/release.yaml

@@ -1,29 +1,47 @@
 name: Tests
 on:
   push:
-    branches: ["master", "main"]
+    tags:
+      - v*
+    branches:
+      - "master"
+      - "main"
   pull_request:
-    branches: ["master", "main"]
+    branches:
+      - "master"
+      - "main"
+
 jobs:
   unit_tests:
     name: Unit Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-go@v5
+      - name: Checkout Code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          ref: ${{ github.ref }}
+
+      - name: Setup Go
+        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
         with:
           go-version: '^1.24.1'
       - run: go test ./...
+
   integration_tests:
     name: Integration Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - name: Checkout Code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          ref: ${{ github.ref }}
+
       - name: Setup Java
-        uses: actions/setup-java@v4
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
         with:
           java-version: '21'
           distribution: 'temurin'
           cache: 'maven'
+
       - name: Run Tests
         run: cd integration_tests && mvn verify