fix(ci): bump plugin skill version and pin workflow actions

Author: AlemTuzlak

.claude-plugin/marketplace.json

@@ -9,7 +9,7 @@
     {
       "name": "copilotkit",
       "description": "CopilotKit v2 skills (runtime, react-core, a2ui-renderer + 6 lifecycle journeys)",
-      "version": "1.56.2",
+      "version": "1.57.3",
       "source": "./",
       "author": {
         "name": "CopilotKit",

.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "copilotkit",
   "description": "CopilotKit v2 skills for Claude Code — runtime (core), react-core (framework), a2ui-renderer (framework), and 6 lifecycle journey skills (0-to-working-chat, spa-without-runtime, go-to-production, scale-to-multi-agent, v1-to-v2-migration, debug-and-troubleshoot).",
-  "version": "1.56.2",
+  "version": "1.57.3",
   "author": {
     "name": "CopilotKit",
     "email": "support@copilotkit.ai"

.github/workflows/plugin-skills-check.yml

@@ -23,15 +23,24 @@ on:
       - ".claude-plugin/**"
       - ".github/workflows/plugin-skills-check.yml"
 
+permissions:
+  contents: read
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        with:
+          persist-credentials: false
 
-      - uses: pnpm/action-setup@v4
+      - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 20
           cache: pnpm