Auto-update README version samples during release bumps

[Copilot]

Release bumps were updating only @v{version} and --branch "v{version}" patterns in markdown, and only in top-level docs/*.md files — leaving nested docs and a few other things stale. This change fixes bump coverage and cleans up the samples it touches.

• Release bump path coverage

  • Changed .release.yml's docs location glob from docs/*.md to docs/**/*.md, so nested files like docs/introduction/actions.md are actually covered by future release bumps (previously silently skipped, which is why they were still pinned to @v2.7.0).
  • The patterns list itself is unchanged: {repository}@v{version} and --branch "v{version}" only. An earlier revision of this PR added an additional unprefixed pattern ({repository}@{version}), but that was removed in dfdbddf after review — this repo only publishes v-prefixed tags (e.g. v2.11.1), so an unprefixed replacement would have pointed docs at a non-existent action ref.

• README / docs sample alignment

  • Updated stale action version refs to @v2.11.1: README.md (was @2.10.0, unprefixed) and all three occurrences in docs/introduction/actions.md (was @v2.7.0).

• Typo fix

  • Corrected Advance Security → Advanced Security everywhere it appeared (README.md, action.yml, examples/workflows/*.yml).

# .release.yml (locations only; patterns unchanged from before this PR)
locations:
  - name: "Update Docs"
    paths:
      - "*.md"
      - "docs/**/*.md"
    patterns:
      - "{repository}@v{version}"
      - '--branch "v{version}"'

[felickz]

@copilot does this only update readme on full release, or on prerelease as well?

[Copilot]

Pull request overview

This PR updates the repository’s release-bump configuration and README usage sample so that action-reference examples stay aligned with the project’s release tags when versions are bumped.

Changes:

• Updated the README GitHub Actions example to use the v2.11.1 tag instead of an unprefixed 2.10.0.
• Extended .release.yml markdown replacement patterns to also match {repository}@{version} (unprefixed refs) during automated bumps.

Show a summary per file

File	Description
README.md	Updates an example workflow snippet to reference the v2.11.1 action tag.
.release.yml	Adds an additional pattern intended to bump unprefixed action refs in markdown.

Review details

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

• Files reviewed: 2/2 changed files
• Comments generated: 3
• Review effort level: Lite

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[Copilot]

@copilot does this only update readme on full release, or on prerelease as well?

Only the full-release bump updates the README. These .release.yml patterns are applied when the version is bumped, while the manual prerelease path only creates the prerelease tag/release and does not update .release.yml or README files.

[Copilot]

Review details

• Files reviewed: 8/8 changed files
• Comments generated: 2
• Review effort level: Lite

[Copilot]

Review details

Suppressed comments (1)

.release.yml:15

• The PR description says .release.yml adds a replacement pattern for unprefixed action refs ({repository}@{version}), but the updated file only contains {repository}@v{version} and --branch "v{version}". Please update the PR description (or re-add the pattern if that was the intent) so release-bump behavior is accurately documented.

      - "*.md"
      - "docs/**/*.md"
    patterns:
      - "{repository}@v{version}"
      - '--branch "v{version}"'

• Files reviewed: 8/8 changed files
• Comments generated: 0 new
• Review effort level: Lite

[Copilot]

Review details

• Files reviewed: 8/8 changed files
• Comments generated: 1
• Review effort level: Lite