build: readable versions actions

Author: sbp-bvanb

.github/workflows/action-sorted-inputs.yml

@@ -11,7 +11,7 @@ jobs:
   check-action-inputs-sorted:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - name: Validate input key order in action.yml

.github/workflows/golang.yml

@@ -16,7 +16,7 @@ jobs:
     env:
       TASK_X_REMOTE_TASKFILES: 1
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - uses: ./

.github/workflows/gomod-go-version-updater.yml

@@ -4,6 +4,7 @@ name: gomod-go-version-updater-action
 "on":
   schedule:
     - cron: 42 6 * * *
+  workflow_dispatch:
 permissions:
   contents: write
   pull-requests: write
@@ -12,4 +13,4 @@ jobs:
   gomod-go-version-updater-action:
     runs-on: ubuntu-24.04
     steps:
-      - uses: schubergphilis/gomod-go-version-updater-action@773e180a2d3700d164a7ded2157f466ce8bc6cd6
+      - uses: schubergphilis/gomod-go-version-updater-action@773e180a2d3700d164a7ded2157f466ce8bc6cd6 # v0.3.7

.github/workflows/mcvs-pr-validation.yml

@@ -16,7 +16,7 @@ jobs:
   MCVS-PR-validation-action:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: schubergphilis/mcvs-pr-validation-action@6f153c01301ab2f92336781173b7f3a796de5f3e
+      - uses: schubergphilis/mcvs-pr-validation-action@6f153c01301ab2f92336781173b7f3a796de5f3e # v0.2.2

.github/workflows/package-version-updater.yml

@@ -3,16 +3,19 @@ name: Package version updater
 "on":
   schedule:
     - cron: 42 5 * * 1
+  workflow_dispatch:
 permissions:
   contents: write
   pull-requests: write
 jobs:
   update-package-version-not-updated-by-dependabot:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
-          persist-credentials: false
+          # to prevent cannot find github.com username while running package
+          # version update script, persist-credentials has been set to true
+          persist-credentials: true 
       - env:
           DEPENDENCIES_LABEL: dependencies
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/taskfile-sorted-units.yml

@@ -9,7 +9,7 @@ jobs:
   taskfile-sorted-units:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - run: |

.github/workflows/taskfile-without-empty-lines.yml

@@ -8,7 +8,7 @@ jobs:
   taskfile-without-empty-lines:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
       - run: |