github-actions-update-actionslisted

# Update All GitHub Actions Audit every `uses:` pin across the repositories in scope, then bring the out-of-date ones current — one commit per repository and action, each justified against the vendor's own release notes. Use the `github-actions-bumping-github-actions` skill for the phase structure. It reads the same two references this command does, so the audit and the single-action path cannot drift: `references/action-pinning.md` and `references/dependabot-closeout.md`. For a single named action, use the `github-actions-update-action` skill instead. User arguments: $ARGUMENTS ## Context Repository — run this command and read the output: ```bash git remote get-url origin 2>/dev/null || echo "(not a git repository)" ``` Default branch — run this command and read the output: ```bash git symbolic-ref --short refs/remotes/origin/HEAD 2>/dev/null || echo "(unknown)" ``` Pins on this branch — run this command and read the output: ```bash git grep -hoE 'uses:[[:space:]]*[^[:space:]]+' "$(git symbolic-ref --short refs/remotes/origin/HEAD 2>/dev/null || echo HEAD)" -- '.github/workflows/*' '.github/actions/*' 2>/dev/null | sed -E 's/uses:[[:space:]]*//' | sort | uniq -c | sort -rn || echo "(no workflows found)" ``` Open dependabot pull requests here — run this command and read the output: ```bash gh pr list --author app/dependabot --state open --limit 50 --json number,title --jq '.[] | "#\(.number) \(.title)"' 2>/dev/null || echo "(none, or gh unavailable)" ``` ## Proc