Update GitHub Actions workflows. (#1336)

This PR was triggered by @t0yv0 generated by the
update-workflows-ecosystem-providers workflow in the pulumi/ci-mgmt
repo, from commit
[8986209fcafff57b470901cc48f1cb2025b4caa1](pulumi/ci-mgmt@8986209).

## Rebasing this PR

If this PR falls behind `master` on pulumi-alicloud and needs to be
regenerated against the latest tip, dispatch
[`update-workflows-single-bridged-provider`](https://github.com/pulumi/ci-mgmt/actions/workflows/update-workflows-single-bridged-provider.yml):

```sh
gh workflow run update-workflows-single-bridged-provider.yml \
  --repo pulumi/ci-mgmt \
  -f provider_name=alicloud \
  -f automerge=false
```

That re-runs this same workflow against current ci-mgmt `master`, closes
this stale PR (via the "obsolete PR" cleanup step above), and opens a
fresh one rebased on the provider's current `master`.

Co-authored-by: Pulumi Bot <bot@pulumi.com>

Author: pulumi-provider-automation[bot]

.github/workflows/prerequisites.yml

@@ -135,12 +135,13 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       run: |
-        EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
-        {
-          echo "SCHEMA_CHANGES<<$EOF";
-          schema-tools compare -r github://api.github.com/pulumi -p alicloud -o "${{ inputs.default_branch }}" -n --local-path=provider/cmd/pulumi-resource-alicloud/schema.json;
-          echo "$EOF";
-        } >> "$GITHUB_ENV"
+        schema-tools compare -r github://api.github.com/pulumi -p alicloud -o "${{ inputs.default_branch }}" -n --local-path=provider/cmd/pulumi-resource-alicloud/schema.json > "$RUNNER_TEMP/schema-check-report.md"
+        cat >> "$RUNNER_TEMP/schema-check-report.md" <<'EOF'
+
+        Maintainer note: consult the [runbook](https://github.com/pulumi/platform-providers-team/blob/main/playbooks/tf-provider-updating.md) for dealing with any breaking changes.
+
+        <!-- "schemaCheck" -->
+        EOF
     - if: inputs.acceptance_fanout == false && inputs.is_pr && inputs.is_automated == false && github.actor != 'dependabot[bot]'
       name: Find schema check comment
       id: find-schema-check-comment
@@ -157,13 +158,7 @@ jobs:
         issue-number: ${{ github.event.pull_request.number }}
         comment-id: ${{ steps.find-schema-check-comment.outputs.comment-id }}
         edit-mode: replace
-        body: >+
-          ${{ env.SCHEMA_CHANGES }}
-
-
-          Maintainer note: consult the [runbook](https://github.com/pulumi/platform-providers-team/blob/main/playbooks/tf-provider-updating.md) for dealing with any breaking changes.
-
-          <!-- "schemaCheck" -->
+        body-path: ${{ runner.temp }}/schema-check-report.md
 
     - name: Upload artifacts
       uses: ./.github/actions/upload-prerequisites

.github/workflows/publish.yml

@@ -166,7 +166,7 @@ jobs:
         # only saving the cache in the prerequisites job
         cache_save: false
     - name: Setup Node
-      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+      uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
       with:
         # we don't set node-version because we install with mise.
         # this step is needed to setup npm auth

.github/workflows/run-acceptance-tests.yml

@@ -189,12 +189,13 @@ jobs:
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       run: |
-        EOF=$(dd if=/dev/urandom bs=15 count=1 status=none | base64)
-        {
-          echo "SCHEMA_CHANGES<<$EOF";
-          schema-tools compare -r github://api.github.com/pulumi -p alicloud -o "${{ github.event.pull_request.base.ref }}" -n --local-path=provider/cmd/pulumi-resource-alicloud/schema.json;
-          echo "$EOF";
-        } >> "$GITHUB_ENV"
+        schema-tools compare -r github://api.github.com/pulumi -p alicloud -o "${{ github.event.pull_request.base.ref }}" -n --local-path=provider/cmd/pulumi-resource-alicloud/schema.json > "$RUNNER_TEMP/schema-check-report.md"
+        cat >> "$RUNNER_TEMP/schema-check-report.md" <<'EOF'
+
+        Maintainer note: consult the [runbook](https://github.com/pulumi/platform-providers-team/blob/main/playbooks/tf-provider-updating.md) for dealing with any breaking changes.
+
+        <!-- "schemaCheck" -->
+        EOF
     - if: github.event_name == 'pull_request' && github.actor != 'dependabot[bot]'
       name: Find schema check comment
       id: find-schema-check-comment
@@ -211,13 +212,7 @@ jobs:
         issue-number: ${{ github.event.pull_request.number }}
         comment-id: ${{ steps.find-schema-check-comment.outputs.comment-id }}
         edit-mode: replace
-        body: >+
-          ${{ env.SCHEMA_CHANGES }}
-
-
-          Maintainer note: consult the [runbook](https://github.com/pulumi/platform-providers-team/blob/main/playbooks/tf-provider-updating.md) for dealing with any breaking changes.
-
-          <!-- "schemaCheck" -->
+        body-path: ${{ runner.temp }}/schema-check-report.md
 
   build_sdk:
     if: github.event_name == 'repository_dispatch' ||