⚙️ [Maintenance]: Release workflow and test suite updated to Process-PSModule v8 and Pester 6

.github/PSModule.yml

@@ -24,7 +24,6 @@ Linter:
   env:
     VALIDATE_BIOME_FORMAT: false
     VALIDATE_BIOME_LINT: false
-    VALIDATE_GITHUB_ACTIONS_ZIZMOR: false
     VALIDATE_JSCPD: false
     VALIDATE_JSON_PRETTIER: false
     VALIDATE_MARKDOWN_PRETTIER: false

.github/dependabot.yml

@@ -12,3 +12,5 @@ updates:
       - github-actions
     schedule:
       interval: weekly
+    cooldown:
+      default-days: 7

.github/linters/zizmor.yaml

@@ -0,0 +1,18 @@
+---
+# Configuration for zizmor, the GitHub Actions static analysis tool.
+# Reference: https://docs.zizmor.sh/configuration/
+#
+# Super-linter passes this file with '--config', resolved from
+# LINTER_RULES_PATH (default '.github/linters'), so the filename must stay
+# 'zizmor.yaml'.
+
+rules:
+  unpinned-uses:
+    config:
+      # Process-PSModule is a first-party PSModule workflow that this
+      # repository tracks by major tag on purpose, so the framework can ship
+      # fixes without a Dependabot bump per consumer. Allow a symbolic ref for
+      # the PSModule org only; everything else falls through to the implicit
+      # '*': hash-pin rule.
+      policies:
+        PSModule/*: ref-pin

.github/workflows/Process-PSModule.yml

@@ -4,6 +4,9 @@ on:
   workflow_dispatch:
   schedule:
     - cron: '0 0 * * *'
+  push:
+    branches:
+      - main
   pull_request:
     branches:
       - main
@@ -13,20 +16,21 @@ on:
       - reopened
       - synchronize
       - labeled
+      - unlabeled
 
 concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
+  group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: false
 
 permissions:
-  contents: write
-  pull-requests: write
-  statuses: write
+  contents: read
   pages: write
   id-token: write
 
 jobs:
   Process-PSModule:
-    uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@bf67cd90269ca5ce25cd76b203678907dc2984b4 # v6.1.19
+    uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@v8
     secrets:
-      APIKey: ${{ secrets.APIKey }}
+      PSGALLERY_API_KEY: ${{ secrets.PSGALLERY_API_KEY }}
+      GitHubAppClientId: ${{ secrets.SHELLY_CLIENT_ID }}
+      GitHubAppPrivateKey: ${{ secrets.SHELLY_PRIVATE_KEY }}