chore(release): merge develop into main v1.18.1

.github/workflows/branch-cleanup.yml

@@ -51,7 +51,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Run branch cleanup
-        uses: LerianStudio/github-actions-shared-workflows/src/config/branch-cleanup@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/config/branch-cleanup@v1.18.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           stale-days: ${{ inputs.stale_days }}

.github/workflows/build.yml

@@ -139,7 +139,7 @@ jobs:
       - name: Get changed paths (monorepo)
         if: inputs.filter_paths != ''
         id: changed-paths
-        uses: LerianStudio/github-actions-shared-workflows/src/config/changed-paths@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/config/changed-paths@v1.18.0
         with:
           filter-paths: ${{ inputs.filter_paths }}
           shared-paths: ${{ inputs.shared_paths }}

.github/workflows/gptchangelog.yml

@@ -146,7 +146,7 @@ jobs:
       - name: Get changed paths (monorepo)
         if: (steps.check-tag.outputs.is_stable == 'true' || inputs.stable_releases_only == false) && inputs.filter_paths != ''
         id: changed-paths
-        uses: LerianStudio/github-actions-shared-workflows/src/config/changed-paths@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/config/changed-paths@v1.18.0
         with:
           filter-paths: ${{ inputs.filter_paths }}
           shared-paths: ${{ inputs.shared_paths }}

.github/workflows/labels-sync.yml

@@ -44,7 +44,7 @@ jobs:
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - name: Sync labels
-        uses: LerianStudio/github-actions-shared-workflows/src/config/labels-sync@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/config/labels-sync@v1.18.0
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           config: ${{ inputs.config || '.github/labels.yml' }}

.github/workflows/pr-security-scan.yml

@@ -91,7 +91,7 @@ jobs:
       # ----------------- Detect Changes & Build Matrix -----------------
       - name: Get changed paths
         id: changed-paths
-        uses: LerianStudio/github-actions-shared-workflows/src/config/changed-paths@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/config/changed-paths@v1.18.0
         with:
           filter-paths: ${{ inputs.filter_paths }}
           shared-paths: ${{ inputs.shared_paths }}
@@ -141,7 +141,7 @@ jobs:
       - name: Trivy Filesystem Scan
         id: fs-scan
         if: always()
-        uses: LerianStudio/github-actions-shared-workflows/src/security/trivy-fs-scan@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/security/trivy-fs-scan@v1.18.0
         with:
           scan-ref: ${{ matrix.working_dir }}
           app-name: ${{ env.APP_NAME }}
@@ -165,7 +165,7 @@ jobs:
       - name: Trivy Image Scan
         id: image-scan
         if: always() && inputs.enable_docker_scan
-        uses: LerianStudio/github-actions-shared-workflows/src/security/trivy-image-scan@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/security/trivy-image-scan@v1.18.0
         with:
           image-ref: '${{ env.DOCKERHUB_ORG }}/${{ env.APP_NAME }}:pr-scan-${{ github.sha }}'
           app-name: ${{ env.APP_NAME }}
@@ -175,15 +175,15 @@ jobs:
       - name: Dockerfile Compliance Checks
         id: dockerfile-checks
         if: always() && inputs.enable_docker_scan && inputs.enable_health_score
-        uses: LerianStudio/github-actions-shared-workflows/src/security/dockerfile-checks@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/security/dockerfile-checks@v1.18.0
         with:
           dockerfile-path: ${{ env.DOCKERFILE_PATH }}
 
       # ----------------- Results & Security Gate -----------------
       - name: Post Security Scan Results to PR
         id: post-results
         if: always() && github.event_name == 'pull_request'
-        uses: LerianStudio/github-actions-shared-workflows/src/security/pr-security-reporter@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/security/pr-security-reporter@v1.18.0
         with:
           github-token: ${{ secrets.MANAGE_TOKEN || secrets.GITHUB_TOKEN }}
           app-name: ${{ env.APP_NAME }}
@@ -215,7 +215,7 @@ jobs:
     runs-on: ${{ inputs.runner_type }}
     steps:
       - name: Slack Notification
-        uses: LerianStudio/github-actions-shared-workflows/src/notify/slack-notify@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/notify/slack-notify@v1.18.0
         with:
           webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
           status: ${{ needs.security_scan.result }}

.github/workflows/release-notification.yml

@@ -138,7 +138,7 @@ jobs:
             exit 1
           fi
           echo "Resolved release tag: $TAG"
-          echo "tag=$TAG" >> $GITHUB_OUTPUT
+          echo "tag=$TAG" >> "$GITHUB_OUTPUT"
 
       - name: Dry run summary
         if: ${{ inputs.dry_run }}
@@ -162,7 +162,7 @@ jobs:
 
       - name: Discord notification
         if: ${{ env.DISCORD_WEBHOOK_URL != '' }}
-        uses: LerianStudio/github-actions-shared-workflows/src/notify/discord-release@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/notify/discord-release@v1.18.0
         with:
           webhook-url: ${{ secrets.DISCORD_WEBHOOK_URL }}
           release-tag: ${{ steps.release.outputs.tag }}
@@ -174,7 +174,7 @@ jobs:
 
       - name: Slack notification
         if: ${{ env.SLACK_WEBHOOK_URL != '' && inputs.slack_channel != '' }}
-        uses: LerianStudio/github-actions-shared-workflows/src/notify/slack-release@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/notify/slack-release@v1.18.0
         with:
           webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
           channel: ${{ inputs.slack_channel }}

.github/workflows/release.yml

@@ -60,7 +60,7 @@ jobs:
       - name: Get changed paths (monorepo)
         if: inputs.filter_paths != ''
         id: changed-paths
-        uses: LerianStudio/github-actions-shared-workflows/src/config/changed-paths@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/config/changed-paths@v1.18.0
         with:
           filter-paths: ${{ inputs.filter_paths }}
           shared-paths: ${{ inputs.shared_paths }}

.github/workflows/s3-upload.yml

@@ -170,7 +170,7 @@ jobs:
 
       - name: Configure AWS credentials
         if: steps.env.outputs.folder != ''
-        uses: aws-actions/configure-aws-credentials@v4
+        uses: aws-actions/configure-aws-credentials@v6
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_ARN }}
           aws-region: ${{ inputs.aws_region }}

.github/workflows/typescript-build.yml

@@ -158,7 +158,7 @@ jobs:
       - name: Get changed paths (monorepo)
         if: inputs.components_json == '' && inputs.filter_paths != ''
         id: changed-paths
-        uses: LerianStudio/github-actions-shared-workflows/src/config/changed-paths@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/config/changed-paths@v1.18.0
         with:
           filter-paths: ${{ inputs.filter_paths }}
           shared-paths: ${{ inputs.shared_paths }}
@@ -255,7 +255,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Build and push Docker image
-        uses: LerianStudio/github-actions-shared-workflows/src/build/docker-build-ts@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/build/docker-build-ts@v1.18.0
         with:
           enable-dockerhub: ${{ inputs.enable_dockerhub }}
           enable-ghcr: ${{ inputs.enable_ghcr }}

.github/workflows/typescript-release.yml

@@ -69,7 +69,7 @@ jobs:
       - name: Get changed paths (monorepo)
         if: inputs.filter_paths != ''
         id: changed-paths
-        uses: LerianStudio/github-actions-shared-workflows/src/config/changed-paths@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/config/changed-paths@v1.18.0
         with:
           filter-paths: ${{ inputs.filter_paths }}
           shared-paths: ${{ inputs.shared_paths }}

src/lint/composite-schema/README.md

@@ -44,7 +44,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Composite Schema Lint
-        uses: LerianStudio/github-actions-shared-workflows/src/lint/composite-schema@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/lint/composite-schema@v1.x.x
         with:
           files: "src/lint/my-check/action.yml,src/build/my-build/action.yml"
 ```

src/lint/readme-check/README.md

@@ -24,7 +24,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: README Check
-        uses: LerianStudio/github-actions-shared-workflows/src/lint/readme-check@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/lint/readme-check@v1.x.x
         with:
           files: "src/lint/my-check/action.yml,src/build/my-build/action.yml"
 ```

src/lint/shellcheck/README.md

@@ -25,7 +25,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Shell Check
-        uses: LerianStudio/github-actions-shared-workflows/src/lint/shellcheck@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/lint/shellcheck@v1.x.x
         with:
           files: ".github/workflows/ci.yml,src/lint/my-check/action.yml"
 ```

src/notify/discord-release/README.md

@@ -55,7 +55,7 @@ jobs:
 ### Dry run (preview only)
 
 ```yaml
-- uses: LerianStudio/github-actions-shared-workflows/src/notify/discord-release@develop
+- uses: LerianStudio/github-actions-shared-workflows/src/notify/discord-release@v1.x.x
   with:
     webhook-url: ${{ secrets.DISCORD_WEBHOOK_URL }}
     release-tag: ${{ github.event.release.tag_name }}

src/notify/pr-lint-reporter/README.md

@@ -42,7 +42,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Post Lint Report
-        uses: LerianStudio/github-actions-shared-workflows/src/notify/pr-lint-reporter@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/notify/pr-lint-reporter@v1.x.x
         with:
           github-token: ${{ secrets.MANAGE_TOKEN || github.token }}
           yamllint-result: ${{ needs.yamllint.result }}

src/notify/slack-notify/README.md

@@ -35,7 +35,7 @@ jobs:
     runs-on: blacksmith-4vcpu-ubuntu-2404
     steps:
       - name: Slack Notification
-        uses: LerianStudio/github-actions-shared-workflows/src/notify/slack-notify@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/notify/slack-notify@v1.x.x
         with:
           webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
           status: ${{ needs.build.result }}

src/notify/slack-release/README.md

@@ -54,7 +54,7 @@ jobs:
 ### Dry run (preview only)
 
 ```yaml
-- uses: LerianStudio/github-actions-shared-workflows/src/notify/slack-release@develop
+- uses: LerianStudio/github-actions-shared-workflows/src/notify/slack-release@v1.x.x
   with:
     webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}
     channel: "releases"

src/security/dockerfile-checks/README.md

@@ -41,7 +41,7 @@ jobs:
 
       - name: Dockerfile Compliance Checks
         id: dockerfile-checks
-        uses: LerianStudio/github-actions-shared-workflows/src/security/dockerfile-checks@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/security/dockerfile-checks@v1.x.x
         with:
           dockerfile-path: './Dockerfile'
 

src/security/pr-security-reporter/README.md

@@ -43,7 +43,7 @@ This composite expects the following files in the runner working directory, gene
 - name: Post Security Scan Results to PR
   id: post-results
   if: always() && github.event_name == 'pull_request'
-  uses: LerianStudio/github-actions-shared-workflows/src/security/pr-security-reporter@develop
+  uses: LerianStudio/github-actions-shared-workflows/src/security/pr-security-reporter@v1.x.x
   with:
     github-token: ${{ secrets.GITHUB_TOKEN }}
     app-name: ${{ env.APP_NAME }}

src/security/trivy-fs-scan/README.md

@@ -46,7 +46,7 @@ jobs:
 
       - name: Trivy Filesystem Scan
         id: fs-scan
-        uses: LerianStudio/github-actions-shared-workflows/src/security/trivy-fs-scan@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/security/trivy-fs-scan@v1.x.x
         with:
           scan-ref: '.'
           app-name: 'my-service'
@@ -56,7 +56,7 @@ jobs:
 
 ```yaml
 - name: Trivy Filesystem Scan
-  uses: LerianStudio/github-actions-shared-workflows/src/security/trivy-fs-scan@develop
+  uses: LerianStudio/github-actions-shared-workflows/src/security/trivy-fs-scan@v1.x.x
   with:
     scan-ref: ${{ matrix.working_dir }}
     app-name: ${{ matrix.name }}

src/security/trivy-image-scan/README.md

@@ -56,7 +56,7 @@ jobs:
           tags: myorg/myapp:scan
 
       - name: Trivy Image Scan
-        uses: LerianStudio/github-actions-shared-workflows/src/security/trivy-image-scan@develop
+        uses: LerianStudio/github-actions-shared-workflows/src/security/trivy-image-scan@v1.x.x
         with:
           image-ref: 'myorg/myapp:scan'
           app-name: 'my-service'