Upgrade GitHub Actions to latest versions

.github/workflows/build-cli-binaries.yml

@@ -105,9 +105,7 @@ jobs:
           prerelease: ${{ github.event_name == 'workflow_dispatch' || contains(github.ref, 'alpha') || contains(github.ref, 'beta') || contains(github.ref, 'rc') }}
           generate_release_notes: true
           make_latest: ${{ github.event_name != 'workflow_dispatch' }}
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-
+          token: ${{ secrets.GITHUB_TOKEN }}  # Migrated from env var
   test-installation:
     name: Test Installation
     needs: build-binaries

.github/workflows/claude-code-doc-review.yml

@@ -32,7 +32,7 @@ jobs:
 
     - name: Run Claude Code Review
       id: claude-review
-      uses: anthropics/claude-code-action@v1
+      uses: anthropics/claude-code-action@v1.0.55
       with:
         anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
         track_progress: true # Forces tag mode with tracking comments

.github/workflows/claude.yml

@@ -32,7 +32,7 @@ jobs:
 
       - name: Run Claude Code
         id: claude
-        uses: anthropics/claude-code-action@v1
+        uses: anthropics/claude-code-action@v1.0.55
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
 

.github/workflows/docs-update-data.yml

@@ -63,7 +63,7 @@ jobs:
 
       - name: Create Pull Request
         if: steps.changes.outputs.has_changes == 'true'
-        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
         with:
           commit-message: 'docs: update toolkits and API data'
           title: 'docs: Update toolkits and API data'

.github/workflows/docs.changelog-notification.yml

@@ -100,8 +100,7 @@ jobs:
 
       - name: Send Slack Notification
         if: steps.changed-files.outputs.has_changelog == 'true'
-        uses: slackapi/slack-github-action@fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3 # v1.27.1
+        uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a  # v2.1.1
         with:
           payload: ${{ steps.extract-metadata.outputs.slack_payload }}
-        env:
-          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_CUSTOMER_COMMS_WEBHOOK_URL }}
+          webhook: ${{ secrets.SLACK_CUSTOMER_COMMS_WEBHOOK_URL }}  # Migrated from env var

.github/workflows/docs.changelog-to-docs.yml

@@ -46,7 +46,7 @@ jobs:
 
       - name: Claude suggests docs updates
         if: steps.detect.outputs.found == 'true'
-        uses: anthropics/claude-code-action@v1
+        uses: anthropics/claude-code-action@v1.0.55
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           prompt: |

.github/workflows/docs.health-check.yml

@@ -98,8 +98,7 @@ jobs:
 
       - name: Notify Slack
         if: steps.check.outputs.has_failures == 'true'
-        uses: slackapi/slack-github-action@fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3 # v1.27.1
+        uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a  # v2.1.1
         with:
           payload: ${{ steps.check.outputs.slack_payload }}
-        env:
-          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_POD_DX_WEBHOOK_URL }}
+          webhook: ${{ secrets.SLACK_POD_DX_WEBHOOK_URL }}  # Migrated from env var

.github/workflows/generate-sdk-docs.yml

@@ -27,7 +27,7 @@ jobs:
       - run: pnpm --filter @composio/core generate:docs
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
         with:
           commit-message: 'docs: auto-generate TypeScript SDK reference'
           title: 'docs: Update TypeScript SDK reference'
@@ -52,7 +52,7 @@ jobs:
       - run: cd python && uv run --with griffe python scripts/generate-docs.py
 
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0  # v8.1.0
         with:
           commit-message: 'docs: auto-generate Python SDK reference'
           title: 'docs: Update Python SDK reference'

.github/workflows/py.test.yml

@@ -173,7 +173,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Install UV
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@v7
         with:
           version: '0.8.19'
 

.github/workflows/ts.release.yml

@@ -32,15 +32,14 @@ jobs:
         run: echo "//registry.npmjs.org/:_authToken=${{ secrets.NPM_TOKEN }}" > ~/.npmrc
       - name: Create Release Pull Request & Publish packages
         id: changesets
-        uses: changesets/action@v1
+        uses: changesets/action@v1.7.0
         if: github.event_name != 'workflow_dispatch' # only run on master merges
-        env:
-          GITHUB_TOKEN: ${{ secrets.CI_BOT_TOKEN }}
         with:
           publish: pnpm changeset:release
           commit: 'Release: update version'
           title: 'Release: update version'
 
+          github-token: ${{ secrets.CI_BOT_TOKEN }}  # Migrated from env var
       - name: Set Version Info
         if: steps.changesets.outputs.published == 'true'
         run: |
@@ -49,11 +48,10 @@ jobs:
 
       - name: Send Slack Notification
         if: steps.changesets.outputs.published == 'true'
-        uses: slackapi/slack-github-action@fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3 # v1.27.1
+        uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a  # v2.1.1
         with:
           payload: |
             {
               "text": "🚀 New SDK version published!\n*Repository:* ${{ github.repository }}\n*Versions:*\n${{ env.SLACK_VERSIONS }}\n*Commit:* ${{ github.sha }}"
             }
-        env:
-          SLACK_WEBHOOK_URL: ${{ secrets.SLACK_RELEASE_WEBHOOK_URL }}
+          webhook: ${{ secrets.SLACK_RELEASE_WEBHOOK_URL }}  # Migrated from env var

.github/workflows/ts.test-e2e.yml

@@ -76,7 +76,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Setup Deno
-        uses: denoland/setup-deno@v2
+        uses: denoland/setup-deno@v2.0.3
         with:
           deno-version: ${{ matrix.deno-version }}