Merge branch 'v3-alpha' into notifications_darwin

.github/workflows/pr-v3.yml

@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@v3
 
       - name: Verify Changed files
-        uses: tj-actions/verify-changed-files@v17
+        uses: step-security/changed-files@3dbe17c78367e7d60f00d78ae6781a35be47b4a1 # v45.0.1
         id: verify-changed-files
         with:
           files: |

.github/workflows/publish-npm.yml

@@ -23,7 +23,7 @@ jobs:
 
       - name: Detect committed package.json changes
         id: package-json-changes
-        uses: tj-actions/changed-files@v45
+        uses: step-security/changed-files@3dbe17c78367e7d60f00d78ae6781a35be47b4a1 # v45.0.1
         with:
           files: |
             v3/internal/runtime/desktop/@wailsio/runtime/package.json
@@ -32,7 +32,7 @@ jobs:
         if: >-
           steps.package-json-changes.outputs.any_modified != 'true'
         id: source-changes
-        uses: tj-actions/changed-files@v45
+        uses: step-security/changed-files@3dbe17c78367e7d60f00d78ae6781a35be47b4a1 # v45.0.1
         with:
           files: |
             v3/internal/runtime/Taskfile.yaml

.github/workflows/semgrep.yml

@@ -5,6 +5,7 @@ on:
     branches:
     - main
     - master
+    - v3-alpha
     paths:
     - .github/workflows/semgrep.yml
   schedule:

.github/workflows/upload-source-documents.yml

@@ -15,7 +15,7 @@ jobs:
 
       - name: Verify Changed files
         id: changed-files
-        uses: tj-actions/changed-files@v41
+        uses: step-security/changed-files@3dbe17c78367e7d60f00d78ae6781a35be47b4a1 # v45.0.1
         with:
           files: |
             website/**/*.mdx