Improve/actions

[NelsonBN]

Checklist before requesting a review

• I have performed a self-review of my code.
• Implemented tests for new features.
• I tested the features already implemented.
• Added usage examples in the readme.

[github-actions]

Test Summary

    5 files      5 suites   1s ⏱️
  252 tests   252 ✅ 0 💤 0 ❌
1 260 runs  1 260 ✅ 0 💤 0 ❌

Results for commit 00d296c.

♻️ This comment has been updated with latest results.

[Copilot]

Pull request overview

This PR tightens GitHub Actions security posture and reduces update noise by applying least-privilege GITHUB_TOKEN permissions, pinning key actions to immutable SHAs, and adjusting Dependabot cadence.

Changes:

• Set workflow-level permissions: {} and define explicit per-job permissions where needed.
• Pin commonly used GitHub Actions (e.g., actions/checkout, actions/upload-artifact, actions/cache, github/codeql-action) to specific commit SHAs.
• Change Dependabot update interval from daily to weekly and add a cooldown window.

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated no comments.

Show a summary per file

File	Description
.github/workflows/vulnerability-check.yml	Adds least-privilege permissions and pins actions/checkout.
.github/workflows/tests.yml	Adds workflow-level permissions hardening and pins checkout / upload-artifact.
.github/workflows/sonarcloud-and-mutations.yml	Moves permissions to job scope and pins checkout / cache.
.github/workflows/release.yml	Adds workflow-level permissions hardening, job-scoped contents: write, and pins checkout.
.github/workflows/publish.yml	Adds least-privilege permissions and pins actions/checkout.
.github/workflows/markdown-link-check.yml	Adds least-privilege permissions and pins actions/checkout.
.github/workflows/codeql-analysis.yml	Adds workflow-level permissions hardening and pins checkout / CodeQL actions.
.github/dependabot.yml	Switches update schedule to weekly and adds cooldown configuration.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

🚀 Stryker report generated 🚀

To more details: https://dashboard.stryker-mutator.io/reports/github.com/TechNobre/PowerUtils.Geolocation/improve-actions-326

[github-actions]

Package	Line Rate	Branch Rate	Complexity	Health
PowerUtils.Geolocation	100%	99%	131	✔
Summary	100% (181 / 181)	99% (69 / 70)	131	✔

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud