chore: clean up workflows (#729)

Author: Jason3S

.github/FUNDING.yml

@@ -1,7 +1,7 @@
 # These are supported funding model platforms
 
 patreon: streetsidesoftware
-tidelift: "npm/cspell"
+tidelift: 'npm/cspell'
 github: # Replace with up to 4 GitHub Sponsors-enabled usernames e.g., [user1, user2]
   - streetsidesoftware
 open_collective: cspell

.github/actions/github-app-token/action.yaml

@@ -4,16 +4,16 @@ inputs:
   node-version:
     required: false
     description: The version of Node to use.
-    default: "22.x"
+    default: '22.x'
 runs:
-  using: "composite"
+  using: 'composite'
   steps:
     - name: Use Node.js ${{ inputs.node-version }}
-      uses: actions/setup-node@v6
+      uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6
       with:
-        registry-url: "https://registry.npmjs.org"
+        registry-url: 'https://registry.npmjs.org'
         node-version: ${{ inputs.node-version }}
-        cache: "npm"
+        cache: 'npm'
     - name: NPM Version
       run: npm -v;
       shell: bash

.github/actions/pr/action.yaml

@@ -5,16 +5,16 @@
 
 version: 2
 updates:
-  - package-ecosystem: "npm" # See documentation for possible values
-    directory: "/" # Location of package manifests
+  - package-ecosystem: 'npm' # See documentation for possible values
+    directory: '/' # Location of package manifests
     schedule:
-      interval: "weekly"
+      interval: 'weekly'
 
-  - package-ecosystem: "github-actions"
+  - package-ecosystem: 'github-actions'
     # Workflow files stored in the
     # default location of `.github/workflows`
     directories:
-      - "/"
-      - "/.github/actions/*"
+      - '/'
+      - '/.github/actions/*'
     schedule:
-      interval: "daily"
+      interval: 'daily'

.github/actions/setup/action.yaml

@@ -17,7 +17,7 @@ changelog:
         - dev
     - title: Other Changes
       labels:
-        - "*"
+        - '*'
     - title: Maintenance
       labels:
         - chore

.github/dependabot.yml

@@ -1,4 +1,4 @@
-name: "CodeQL"
+name: 'CodeQL'
 
 on:
   push:
@@ -11,7 +11,7 @@ on:
       - cspell4
   workflow_dispatch:
   schedule:
-    - cron: "0 23 * * 0"
+    - cron: '0 23 * * 0'
 
 jobs:
   analyze:
@@ -20,15 +20,15 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           # Make sure it goes back far enough to find where the branch split from main
           fetch-depth: 20
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
         with:
-          languages: "javascript"
+          languages: 'javascript'
 
       - name: Perform CodeQL Analysis
         uses: github/codeql-action/analyze@v4

.github/release.yml

@@ -10,9 +10,9 @@ jobs:
   cspell:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
       - uses: streetsidesoftware/cspell-action@v8
         with:
-          files: "."
+          files: '.'
           incremental_files_only: false
           check_dot_files: true

.github/workflows/codeql-analysis.yml

@@ -2,34 +2,34 @@
 # To get a newer version, you will need to update the SHA.
 # You can also reference a tag or branch, but the action may change without warning.
 
-name: " 📦 Publish Docker Images"
+name: ' 📦 Publish Docker Images'
 
 on:
   workflow_dispatch:
     inputs:
       dryRun:
-        description: "Dry Run"
+        description: 'Dry Run'
         type: choice
         options:
-          - "yes"
-          - "no"
-        default: "no"
+          - 'yes'
+          - 'no'
+        default: 'no'
         required: false
       ref:
-        description: "Reference / tag to publish"
+        description: 'Reference / tag to publish'
         required: false
         type: string
 
   workflow_call:
     inputs:
       ref:
-        description: "Reference / tag to publish"
+        description: 'Reference / tag to publish'
         required: true
         type: string
 
 env:
   REGISTRY: ghcr.io
-  IMAGE_NAME: "streetsidesoftware/cspell"
+  IMAGE_NAME: 'streetsidesoftware/cspell'
 
 permissions:
   contents: read
@@ -44,7 +44,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           ref: ${{ github.event.inputs.ref || github.ref }}
 

.github/workflows/cspell-action.yml

@@ -1,4 +1,4 @@
-name: " 🚀 release-please"
+name: ' 🚀 release-please'
 
 on:
   push:
@@ -35,7 +35,7 @@ jobs:
       id-token: write
     steps:
       # The logic below handles the npm publication:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
         with:
           ref: ${{ needs.release-please.outputs.tag_name }}
       - name: Setup