Upgrade GitHub CI/CD Workflows to Current Stable Version

[aj-stein-nist]

Committer Notes

Closes #116.

For testing, I pushed to main on my developer fork and ran GitHub Actions as if this was merged here as well:

https://github.com/aj-stein-nist/oscal-content/actions/runs/3139302623

aj-stein-nist/oscal-content@e0b05be

This is ready for review, but several things must be completed before this is valid and mergeable:

• Fix broken uri-use page links in updated reference docs of develop branch OSCAL#1518 must be merged into OSCAL develop
• current dependency PRs in this active list as of today must be merged into OSCAL develop after
  this
• This repo must have a PR created to take updated OSCAL develop branch and refresh that as a submodule in the oscal-content develop branch (done in Update develop branch submodule to OSCAL develop #157)
• This repo must have a PR created to take updated OSCAL main branch and refresh that as a submodule in the oscal-content main branch (done in Update main branch submodule to OSCAL main #156)

All Submissions:

• Have you followed the guidelines in our Contributing document?
• Have you checked to ensure there aren't other open Pull Requests for the same update/change?
• Have you squashed any non-relevant commits and commit messages? [instructions]
• Do all automated CI/CD checks pass?

Changes to Core Features:

• Have you added an explanation of what your changes do and why you'd like us to include them?
• Have you written new tests for your core changes, as applicable?
• Have you included examples of how to use your new feature(s)?

[aj-stein-nist]

@david-waltermire-nist this one is GTG. I did leave 3 separate commits for us to discuss/review prior to merge, the second for Dependabot, and most importantly and last, pulling up the submodule to make this possible using pinned deps from files. I presume the latter may or may not be desirable given release priorities and strategy here let me know.

Marking this one ready for review and feedback.

[aj-stein-nist]

After touchups in the upstream develop branch of usnistgov/OSCAL, I should come back to this quickly with a second pass later in the week and align the version numbers to cut down on GHA Dependabot churn here once it is merged immediately after.

[david-waltermire]

@aj-stein-nist Is this ready to review and merge?

[aj-stein-nist]

@aj-stein-nist Is this ready to review and merge?

It might be best if I update some of the GitHub Actions versions now that we merged a ton of them upstream in OSCAL repo as well. Give me a few minutes. I will spruce up here and ping you when it is ready.

[aj-stein-nist]

@david-waltermire-nist dependencies updated and this is ready for re-review. I would argue we might want to hold off on merge and discuss implications of this comment first: #144 (comment). Just reviewed previous work to make sure I didn't miss anything.

[david-waltermire]

Thanks!