Fix action versions

.github/workflows/build.yml

@@ -204,7 +204,7 @@ jobs:
           (github.ref == 'refs/heads/main' ||
            github.ref == 'refs/heads/rc' ||
            github.ref == 'refs/heads/hotfix-rc')
-        uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2
+        uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
 
       - name: Sign image with Cosign
         if: |
@@ -254,7 +254,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up .NET
-        uses: actions/setup-dotnet@d4c94342e560b34958eacfc5d055d21461ed1c5d # v5.0.0
+        uses: actions/setup-dotnet@2016bd2012dba4e32de620c46fe006a3ac9f0602 # v5.0.1
 
       - name: Make Docker stubs
         if: |
@@ -367,7 +367,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up .NET
-        uses: actions/setup-dotnet@d4c94342e560b34958eacfc5d055d21461ed1c5d # v5.0.0
+        uses: actions/setup-dotnet@2016bd2012dba4e32de620c46fe006a3ac9f0602 # v5.0.1
 
       - name: Publish project
         run: |

.github/workflows/cleanup-container-images.yml

@@ -115,7 +115,7 @@ jobs:
       - name: Cleanup old dev-sha tagged images
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # Keep dev-sha images for 30 days (only applies to main branch commit-specific tags)
+          # Keep dev-sha images for MAX__AGE_DAYS (only applies to main branch commit-specific tags)
           MAX_AGE_DAYS: 30
         run: |
           set -e
@@ -124,7 +124,7 @@ jobs:
 
           echo "Processing cleanup for old dev-sha images of: ${IMAGE_NAME}"
 
-          # Calculate cutoff date (30 days ago)
+          # Calculate cutoff date
           CUTOFF_DATE=$(date -u -d "${MAX_AGE_DAYS} days ago" +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -u -v-${MAX_AGE_DAYS}d +%Y-%m-%dT%H:%M:%SZ)
           echo "Cutoff date: ${CUTOFF_DATE}"
 

.github/workflows/release.yml

@@ -65,7 +65,7 @@ jobs:
             swagger.json"
 
       - name: Create release
-        uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # v1.16.0
+        uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1.20.0
         with:
           artifacts: "docker-stub-US.zip,
             docker-stub-EU.zip,