Pin Process-PSModule workflow reference to immutable SHA

[Marius Storhaug (MariusStorhaug)]

The CI workflow reference is now pinned to a specific commit SHA, consistent with all other uses: references in the PSModule infrastructure. Dependabot will automatically propose updates when new versions of Process-PSModule are released.

Changed: Workflow reference pinned to immutable SHA

The Process-PSModule reusable workflow reference in .github/workflows/Process-PSModule.yml was using a mutable major version tag (@v5). It is now pinned to the exact commit SHA with the patch-level version in a trailing comment:

# Before
uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@v5

# After
uses: PSModule/Process-PSModule/.github/workflows/workflow.yml@4343d76f9e8c9468527175ea292092c2d055be8c # v5.4.5

Dependabot's github-actions ecosystem is already configured and will keep this reference up to date automatically.

[Copilot]

Pull request overview

Pins the Process-PSModule reusable workflow reference in CI to an immutable commit SHA to avoid mutable tag drift and align with secure GitHub Actions dependency practices.

Changes:

• Updated .github/workflows/Process-PSModule.yml to use a full commit SHA instead of the @v5 tag (with a trailing comment indicating v5.4.5).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.