OSOE-735: Introduce versioning and releases

.github/actions/set-gha-refs/Set-Called-GHA-Refs.ps1

@@ -0,0 +1,35 @@
+param(
+    [String[]] $CalledRepoBaseIncludeList,
+    [String[]] $PathIncludeList,
+    [String[]] $FileIncludeList,
+    [String] $ExpectedRef
+)
+
+if ($CalledRepoBaseIncludeList.Count -eq 0)
+{
+    Write-Output '::warning file=Check-Called-GHA-refs.ps1,line10::CalledRepoBaseIncludeList is empty which is unexpected. If this was intentional, you can ignore this warning.'
+    exit 0 # Nothing to check because array is empty.
+}
+
+$CalledRepoBaseIncludeList = $CalledRepoBaseIncludeList.ForEach({ 'uses:\s*' + $PSItem + '(.*)@(.*)' })
+
+$matchedRefs = Get-ChildItem -Path $PathIncludeList -Include $FileIncludeList -Force -Recurse |
+    Select-String -Pattern $CalledRepoBaseIncludeList 
+
+if ($matchedRefs.Count -gt 0)
+{
+
+    "These called GitHub Actions and Workflows have been explicitly set to ref '$ExpectedRef'." >> $env:GITHUB_STEP_SUMMARY
+
+    foreach ($matched in $matchedRefs)
+    {
+        $oldline = $matched.Line
+        $newline = $matched.Line -Replace '@(.*)', "@$ExpectedRef"
+        Write-Output $oldline
+        Write-Output $newline
+
+        $filename = $matched.RelativePath($pwd)
+
+        (Get-Content $filename).Replace($oldline, $newline) | Set-Content $filename
+    }
+}

.github/actions/set-gha-refs/action.yml

@@ -0,0 +1,44 @@
+name: Set GitHub Actions References
+description: >
+  Explicitly sets all called GitHub Action and Workflow references to an expected version.
+
+inputs:
+  path-include-list:
+    required: false
+    default: '@(".github")'
+    description: >
+      PowerShell string array of paths, relative to the repository root, to search for GHA files, e.g. '@(".github")' or '@(".github/actions", ".github/workflows")'. The
+      parameter must be a PowerShell string array.
+  file-include-list:
+    required: false
+    default: '@("*.yml","*.yaml")'
+    description: >
+      PowerShell string array of file name patterns to include when evaluating GHA files, e.g. '@("*.yml")' or '@("*.yml", "*.yaml")'. The
+      parameter must be a PowerShell string array.
+  called-repo-base-include-list:
+    required: false
+    default: '@("${{ github.repository }}")'
+    description: >
+      PowerShell string array of repository base URLs to include when evaluating called GHA Workflows and Actions, e.g '@("Lombiq/GitHub-Actions")' or
+      '@("Lombiq/GitHub-Actions", "Lombiq/Open-Source-Orchard-Core-Extensions")'. The parameter must be a PowerShell string array.
+  expected-ref:
+    required: true
+    description: The expected reference value to set for all called GHA Workflows and Actions.
+runs:
+  using: "composite"
+  steps:
+    - name: Setup
+      shell: pwsh
+      run: |
+        "${{ github.action_path }}" >> $Env:GITHUB_PATH
+
+    - name: Set References
+      shell: pwsh
+      run: |
+        $params = @{
+            PathIncludeList = ${{ inputs.path-include-list }}
+            FileIncludeList = ${{ inputs.file-include-list }}
+            CalledRepoBaseIncludeList = ${{ inputs.called-repo-base-include-list }}
+            ExpectedRef = "${{ inputs.expected-ref }}"
+        }
+        Set-Called-GHA-Refs @params

.github/workflows/tag-and-release.yml

@@ -0,0 +1,39 @@
+name: Tag and Release LGHA
+on:
+  push:
+    branches:
+      - release/*
+
+jobs:
+  run:
+    name: Update LGHA Refs
+    runs-on: ubuntu-latest
+    permissions:
+      # Give the default GITHUB_TOKEN write permission to commit and push the changed files back to the repository.
+      contents: write
+    steps:
+      - name: Checkout Repository
+        uses: Lombiq/GitHub-Actions/.github/actions/checkout@dev
+        with:
+          token: ${{ secrets.TAG_AND_RELEASE }}
+
+      - name: Determine Version Tag Name from Branch Name
+        id: determine-tag
+        shell: pwsh
+        run: |
+          $refname = "${{ github.ref_name }}"
+          $tagname = $refname -replace 'release/', ''
+          $output = "tagname=$tagname"
+          Write-Output "output=$output"
+          $output >> $env:GITHUB_OUTPUT
+
+      - name: Set Ref for GitHub Actions and Workflows
+        uses: Lombiq/GitHub-Actions/.github/actions/set-gha-refs@issue/OSOE-735
+        with:
+          expected-ref: '${{ steps.determine-tag.outputs.tagname }}'
+
+      - name: Commit and Push Changes
+        uses: stefanzweifel/git-auto-commit-action@v5
+        with:
+          commit_message: Update called GitHub Actions and Workflows to release version
+          tagging_message: ${{ steps.determine-tag.outputs.tagname }}