From 51593c6911f427135fb2963522987a0bf1e87f36 Mon Sep 17 00:00:00 2001
From: Vince Grassia <593223+vgrassia@users.noreply.github.com>
Date: Thu, 15 Jan 2026 17:33:27 -0500
Subject: [PATCH] Fix action versions

---
 .github/workflows/build.yml                    | 6 +++---
 .github/workflows/cleanup-container-images.yml | 4 ++--
 .github/workflows/release.yml                  | 2 +-
 3 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index a7c9656487..07df091ba9 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -204,7 +204,7 @@ jobs:
           (github.ref == 'refs/heads/main' ||
            github.ref == 'refs/heads/rc' ||
            github.ref == 'refs/heads/hotfix-rc')
-        uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2
+        uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
 
       - name: Sign image with Cosign
         if: |
@@ -254,7 +254,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up .NET
-        uses: actions/setup-dotnet@d4c94342e560b34958eacfc5d055d21461ed1c5d # v5.0.0
+        uses: actions/setup-dotnet@2016bd2012dba4e32de620c46fe006a3ac9f0602 # v5.0.1
 
       - name: Make Docker stubs
         if: |
@@ -367,7 +367,7 @@ jobs:
           persist-credentials: false
 
       - name: Set up .NET
-        uses: actions/setup-dotnet@d4c94342e560b34958eacfc5d055d21461ed1c5d # v5.0.0
+        uses: actions/setup-dotnet@2016bd2012dba4e32de620c46fe006a3ac9f0602 # v5.0.1
 
       - name: Publish project
         run: |
diff --git a/.github/workflows/cleanup-container-images.yml b/.github/workflows/cleanup-container-images.yml
index 871131b20f..a31c434d9e 100644
--- a/.github/workflows/cleanup-container-images.yml
+++ b/.github/workflows/cleanup-container-images.yml
@@ -115,7 +115,7 @@ jobs:
       - name: Cleanup old dev-sha tagged images
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          # Keep dev-sha images for 30 days (only applies to main branch commit-specific tags)
+          # Keep dev-sha images for MAX__AGE_DAYS (only applies to main branch commit-specific tags)
           MAX_AGE_DAYS: 30
         run: |
           set -e
@@ -124,7 +124,7 @@ jobs:
 
           echo "Processing cleanup for old dev-sha images of: ${IMAGE_NAME}"
 
-          # Calculate cutoff date (30 days ago)
+          # Calculate cutoff date
           CUTOFF_DATE=$(date -u -d "${MAX_AGE_DAYS} days ago" +%Y-%m-%dT%H:%M:%SZ 2>/dev/null || date -u -v-${MAX_AGE_DAYS}d +%Y-%m-%dT%H:%M:%SZ)
           echo "Cutoff date: ${CUTOFF_DATE}"
 
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index a4285f14d5..a09c7fbefc 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -65,7 +65,7 @@ jobs:
             swagger.json"
 
       - name: Create release
-        uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # v1.16.0
+        uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1.20.0
         with:
           artifacts: "docker-stub-US.zip,
             docker-stub-EU.zip,