chore: use the checkout major tag

.github/actions/package-e2e-report/action.yml

@@ -82,7 +82,7 @@ runs:
         } >> "$GITHUB_OUTPUT"
 
     - name: Upload report image archive
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      uses: actions/upload-artifact@v7
       with:
         name: ${{ inputs.artifact-name }}
         path: ${{ steps.package.outputs.archive-path }}

.github/actions/prepare-e2e/action.yml

@@ -47,13 +47,13 @@ runs:
           "$GITHUB_OUTPUT"
 
     - name: Set up pnpm
-      uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
+      uses: pnpm/action-setup@v6
       with:
         version: ${{ inputs.pnpm-version }}
         run_install: false
 
     - name: Set up Node.js
-      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+      uses: actions/setup-node@v7
       with:
         node-version: ${{ inputs.node-version }}
         cache: pnpm

.github/actions/publish-e2e-results/action.yml

@@ -91,7 +91,7 @@ runs:
     - id: publish
       name: Upload final E2E results
       continue-on-error: true
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      uses: actions/upload-artifact@v7
       with:
         name: ${{ inputs.artifact-name }}
         path: ${{ steps.prepare.outputs.results-directory }}/

.github/workflows/e2e.yml

@@ -47,7 +47,7 @@ jobs:
     timeout-minutes: 45
     steps:
       - name: Check out repository
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+        uses: actions/checkout@v7
 
       - id: e2e
         name: Run E2E
@@ -65,7 +65,7 @@ jobs:
 
       - name: Update pull request
         if: always() && github.event_name == 'pull_request'
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
+        uses: actions/github-script@v8
         env:
           E2E_RESULT: ${{ steps.e2e.outputs.result }}
           E2E_PRIMARY_FAILURE: ${{ steps.e2e.outputs.primary-failure }}

README.md

@@ -36,23 +36,23 @@ The template owns repository policy: triggers, permissions, concurrency, checkou
 
 ## Use the action
 
-Check out the caller repository first, then invoke the root action. Pin it to a full commit SHA:
+Check out the caller repository first, then invoke the root action. Use major-version references for released actions:
 
 ```yaml
 permissions:
   contents: read
   pull-requests: write
 
 steps:
-  - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+  - uses: actions/checkout@v7
 
   - id: e2e
-    uses: codotech/playwright-e2e@<40-character-commit-sha>
+    uses: codotech/playwright-e2e@main
     with:
       profile: pull-request
 ```
 
-There is intentionally no release tag yet. Adopt an immutable commit only after reviewing it; the starter contains a working pinned example.
+There is intentionally no release tag yet, so the starter follows `main`. Replace it with `@v1` when the first major version is published.
 
 ### Inputs
 

action.yml

@@ -111,7 +111,7 @@ runs:
     - id: runner-cache
       name: Restore E2E runner archive
       continue-on-error: true
-      uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+      uses: actions/cache@v6
       with:
         path: .e2e-runner
         key: e2e-runner-v1-${{ runner.os }}-${{ runner.arch }}-${{ steps.plan.outputs.runner-content-hash }}
@@ -143,7 +143,7 @@ runs:
       name: Upload portable E2E runner image
       if: always() && (steps.reuse.outcome == 'success' || steps.build.outcome == 'success')
       continue-on-error: true
-      uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+      uses: actions/upload-artifact@v7
       with:
         name: e2e-runner-image
         path: ${{ steps.reuse.outputs.archive-path || steps.build.outputs.archive-path }}