Merge branch 'main' into temporal_proxy_overview

Author: Duncanma

.github/workflows/update-cli-docs.yml

@@ -59,7 +59,7 @@ jobs:
           go-version: '1.26'
 
       - name: Checkout cloud-cli repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           path: cloud-cli
           submodules: recursive

.github/workflows/update-custom-role-permissions.yml

@@ -22,7 +22,7 @@ jobs:
           private-key: ${{ secrets.TEMPORAL_CICD_PRIVATE_KEY }}
 
       - name: Checkout docs repo
-        uses: actions/checkout@v7
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           persist-credentials: true
           token: ${{ steps.generate_token.outputs.token }}

.github/workflows/vale-ci.yml

@@ -14,7 +14,7 @@ jobs:
     name: Lint prose
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - uses: vale-cli/vale-action@2.1.2
         with: