Create release for GCM 2.4.0 (#1457)

**Changes:**

- Add support for managed identity and service principals in Azure Repos
(#1372)
- Support universal Gitea OAuth app configuration (#1442)
- Set default generic OAuth redirect URI value (#1444)
- Drop WPF helpers on Windows (#1417)
- Add software rendering override for Windows (#1445, #1453)
- Recognise GitLab hosts via WWW-Authenticate header (#1428)
- Recognise Bitbucket hosts via WWW-Authenticate header (#1441)
- Support GitHub Gist remote URLs (#1402)
- Update to Avalonia 11.x (#1383)
- Documentation updates (#1416)
- Drop unnecessary .NET Framework-specific code (#1447)
- Updates to release process (#1386, #1381)
- Update code signing certificates (#1431)

.github/set_up_esrp.ps1

@@ -1,5 +1,5 @@
 # Install ESRP client
-az storage blob download --file esrp.zip --auth-mode login --account-name esrpsigningstorage --container signing-resources --name microsoft.esrpclient.1.2.76.nupkg
+az storage blob download --file esrp.zip --auth-mode login --account-name $env:AZURE_STORAGE_ACCOUNT --container $env:AZURE_STORAGE_CONTAINER --name $env:ESRP_TOOL
 Expand-Archive -Path esrp.zip -DestinationPath .\esrp
 
 # Install certificates

.github/workflows/codeql-analysis.yml

@@ -22,7 +22,7 @@ jobs:
         language: [ 'csharp' ]
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/continuous-integration.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: windows-latest
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
 
     - name: Setup .NET
       uses: actions/[email protected]
@@ -56,7 +56,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
 
     - name: Setup .NET
       uses: actions/[email protected]
@@ -97,7 +97,7 @@ jobs:
         runtime: [ osx-x64, osx-arm64 ]
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
 
     - name: Setup .NET
       uses: actions/[email protected]

.github/workflows/lint-docs.yml

@@ -18,9 +18,9 @@ jobs:
     name: Lint markdown files
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
-      - uses: DavidAnson/markdownlint-cli2-action@8f3516061301755c97ff833a8e933f09282cc5b5
+      - uses: DavidAnson/markdownlint-cli2-action@ed4dec634fd2ef689c7061d5647371d8248064f1
         with:
           globs: |
             "**/*.md"
@@ -30,7 +30,7 @@ jobs:
     name: Check for broken links
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Run link checker
         # For any troubleshooting, see:

.github/workflows/release-homebrew.yaml

@@ -5,17 +5,21 @@ on:
 
 jobs:
   release:
-    runs-on: ubuntu-latest
+    runs-on: macos-latest
     environment: release
+    env:
+        HOMEBREW_GITHUB_API_TOKEN: ${{ secrets.HOMEBREW_TOKEN }}
     steps:
-    - name: Update Homebrew tap
-      uses: mjcheetham/[email protected]
-      with:
-        token: ${{ secrets.HOMEBREW_TOKEN }}
-        tap: Homebrew/homebrew-cask
-        name: git-credential-manager
-        type: cask
-        alwaysUsePullRequest: true
-        releaseAsset: |
-          gcm-osx-x64-(.*)\.pkg
-          gcm-osx-arm64-(.*)\.pkg
+    - name: Open PR against homebrew/homebrew-cask
+      run: |
+        # Get latest version
+        version=$(curl --silent "https://api.github.com/repos/git-ecosystem/git-credential-manager/releases/latest" |
+          grep '"tag_name":' |
+          sed -E 's/.*"v([0-9\.]+).*/\1/')
+
+        # Ensure local Homebrew repository is up to date
+        cd "$(brew --repository homebrew/cask)"
+        git pull
+
+        # Open PR to update to latest version
+        brew bump-cask-pr git-credential-manager --version $version --no-audit --no-browse