chore(sync): main → develop tras el barrido de dependabot

.github/workflows/openssf-scorecard.yml

@@ -112,7 +112,7 @@ jobs:
           retention-days: 90
 
       - name: Upload results to code scanning
-        uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
+        uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
         with:
           sarif_file: scorecard-results.sarif
 

.github/workflows/published-canary.yml

@@ -48,7 +48,7 @@ jobs:
       # uninstallable CLI precisely because the workspace symlink hid it.
       - uses: actions/checkout@v4
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: '20'
 

.github/workflows/sdk-cli-ci.yml

@@ -416,16 +416,16 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.37.3
+        uses: github/codeql-action/init@v4.37.9
         with:
           languages: javascript-typescript
           queries: security-and-quality
 
       - name: Autobuild
-        uses: github/codeql-action/autobuild@v4.37.3
+        uses: github/codeql-action/autobuild@v4.37.9
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.37.3
+        uses: github/codeql-action/analyze@v4.37.9
         with:
           category: "/language:javascript-typescript"
 
@@ -452,7 +452,7 @@ jobs:
           severity: 'CRITICAL,HIGH'
 
       - name: Upload Trivy SARIF Report
-        uses: github/codeql-action/upload-sarif@v4.37.3
+        uses: github/codeql-action/upload-sarif@v4.37.9
         if: always()
         with:
           sarif_file: 'trivy-results.sarif'

.github/workflows/sdk-cli-release.yml

@@ -576,7 +576,7 @@ jobs:
           echo "✅ All $count platform binaries present"
 
       - name: Upload to Release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@v3
         with:
           tag_name: ${{ needs.release-gate.outputs.tag_name }}
           name: Release ${{ needs.release-gate.outputs.tag_name }}

action.yml

@@ -119,7 +119,7 @@ runs:
     # ------------------------------------------------------------------
     - name: Setup Node.js ${{ inputs.node-version }}
       if: ${{ inputs.cli-command == '' }}
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@v7
       with:
         node-version: ${{ inputs.node-version }}