GitHub Action Update

.cspell.json

@@ -47,6 +47,7 @@
     "langtag",
     "lded",
     "llms",
+    "micnncim",
     "mingo",
     "msapplication",
     "nextid",

.github/workflows/codeql-analysis.yml

@@ -23,6 +23,8 @@ jobs:
     steps:
       - name: Checkout repository
         uses: actions/checkout@v5
+        with:
+          persist-credentials: false
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3

.github/workflows/publish.yml

@@ -12,6 +12,8 @@ jobs:
     steps:
       - name: ⬇️ Checkout
         uses: actions/checkout@v5
+        with:
+          persist-credentials: false
 
       - name: ⎔ Setup node
         uses: actions/setup-node@v4

.github/workflows/spellcheck.yml

@@ -14,6 +14,9 @@ jobs:
     if: ${{ github.actor != 'dependabot[bot]' }}
     steps:
       - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
+
       - uses: streetsidesoftware/cspell-action@v7
         with:
           check_dot_files: false

.github/workflows/super-linter.yml

@@ -27,9 +27,10 @@ jobs:
         uses: actions/checkout@v5
         with:
           fetch-depth: 0
+          persist-credentials: false
 
       - name: Super-linter
-        uses: super-linter/super-linter/slim@v8
+        uses: super-linter/super-linter/slim@v8.1.0
         env:
           DEFAULT_BRANCH: main
           FILTER_REGEX_EXCLUDE: '/test/'

.github/workflows/sync-labels.yml

@@ -14,6 +14,8 @@ jobs:
 
     steps:
       - uses: actions/checkout@v5
+        with:
+          persist-credentials: false
 
       - uses: micnncim/action-label-syncer@v1
         with:

.github/workflows/test.yml

@@ -47,6 +47,8 @@ jobs:
 
       - name: ⬇️ Checkout
         uses: actions/checkout@v5
+        with:
+          persist-credentials: false
 
       - name: ⎔ Setup node ${{ matrix.node }}
         uses: actions/setup-node@v4