APM Dependabot fix

.github/workflows/apigee-release-pipeline.yml

@@ -4,7 +4,8 @@ defaults:
     shell: bash # Explicitly sets pipeline to fail if any subprocess fails
 on:
   push
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   deploy-hello-world:

.github/workflows/continous-integration-workflow.yaml

@@ -50,9 +50,7 @@ jobs:
         run: make check-licenses
 
       - name: Set SPEC_VERSION env var
-        run: echo ::set-env name=SPEC_VERSION::$(poetry run python scripts/calculate_version.py)
-        env:
-          ACTIONS_ALLOW_UNSECURE_COMMANDS: true
+        run: echo "SPEC_VERSION=$(poetry run python scripts/calculate_version.py)" >> "$GITHUB_ENV"
 
       - name: Create release (master only)
         id: create-release

.github/workflows/sbom.yml

@@ -26,10 +26,10 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v5        
 
-      - name: Setup Python 3.13
+      - name: Setup Python 3.9
         uses: actions/setup-python@v5
         with:
-          python-version: "3.13"
+          python-version: "3.9"
 
       - name: Setup Terraform
         uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd

.github/workflows/spec-release-pipeline.yml

@@ -4,7 +4,8 @@ defaults:
     shell: bash # Explicitly sets pipeline to fail if any subprocess fails
 on:
   push
-permissions: read-all
+permissions:
+  contents: read
 
 jobs:
   deploy-hello-world-spec: