[Sync] Update project files from source repository (4d9ec28)

[mrz1836]

What Changed

• Updated actions/cache, actions/cache/restore, and actions/cache/save from commit 27d5ce7f107fe9357f9df03efb73ab90386fccae (v5.0.5) to commit 55cc8345863c7cc4c66a329aec7e433d2d1c52a9 (v6.1.0) across multiple GitHub Actions workflow files
• Updated MAGE_X_VERSION from v1.12.1 to v1.12.2 in .github/env/10-mage-x.env
• Modified the load-env.sh script to add 10-mage-x.env to the list of environment files being loaded
• Added permissions: contents: read to the fortress-release.yml workflow file

Why It Was Necessary

• Upgrading the GitHub Actions cache action to v6.1.0 provides bug fixes, performance improvements, and new features available in the latest stable release
• Updating mage-x to v1.12.2 incorporates the latest patches and improvements for the build tool
• Adding explicit read permissions follows security best practices by implementing least-privilege access for the release workflow

Testing Performed

• Verified that all GitHub Actions workflow files contain syntactically correct YAML with the updated action versions
• Validated that the environment file changes follow the established pattern for version management
• Confirmed that the permissions addition aligns with GitHub's security recommendations for workflow files

Impact / Risk

• Risk Level: Low - These are patch/minor version updates to well-tested GitHub Actions and build tools
• Breaking Changes: None expected - the cache action v6.x maintains backward compatibility with v5.x usage patterns
• CI Impact: Workflows will use the updated cache action which may have improved performance or reliability characteristics

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[Copilot]

Pull request overview

This PR syncs GitHub Actions and CI environment configuration updates from the source repository, primarily bumping pinned action SHAs/versions and adjusting CI/release workflow behavior.

Changes:

• Bumped actions/cache (and cache/restore + cache/save) to the pinned SHA for v6.1.0 across multiple composite actions/workflows.
• Updated CI tool/version environment values (e.g., GoReleaser version, Govulncheck Go version).
• Adjusted the release workflow checkout step to set persist-credentials: false.

Reviewed changes

Copilot reviewed 11 out of 11 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
.github/workflows/fortress-release.yml	Tweaks release workflow checkout behavior (persisted credentials) and includes cache action bump usage within the workflow.
.github/env/load-env.sh	Updates script header metadata (author).
.github/env/10-mage-x.env	Updates tool version (GoReleaser) in CI env configuration.
.github/env/00-core.env	Updates Govulncheck Go version in core CI env configuration.
.github/actions/warm-cache/action.yml	Updates cache save action SHA pins for Go build/module caches.
.github/actions/setup-magex/action.yml	Updates cache action SHA pins for magex caching.
.github/actions/setup-mage/action.yml	Updates cache action SHA pin for mage caching.
.github/actions/setup-goreleaser/action.yml	Updates cache action SHA pin and bumps goreleaser-action pin.
.github/actions/setup-go-with-cache/action.yml	Updates cache action SHA pins and bumps setup-go action pin.
.github/actions/setup-benchstat/action.yml	Updates cache action SHA pin for benchstat caching.
.github/actions/cache-redis-image/action.yml	Updates cache restore/save action SHA pins for Redis image caching.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.