chore: revert yq pins in test-yq.yml; add release note for github-action/Dockerfile SHA

Agent-Logs-Url: https://github.com/mikefarah/yq/sessions/e1b35d79-92a3-47d5-b4ac-a2efe2fd58ce

Co-authored-by: mikefarah <1151925+mikefarah@users.noreply.github.com>

.github/workflows/test-yq.yml

@@ -16,13 +16,13 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Get test
         id: get_value
-        uses: mikefarah/yq@2927a282833541e91cb3a9802209aa7b730f10aa # master
+        uses: mikefarah/yq@master
         with:
           cmd: yq '.test' examples/multiline-text.yaml
       - name: Multiline test
         run: echo "### It was [${{ steps.get_value.outputs.result }}]" >> $GITHUB_STEP_SUMMARY
       - name: Write inplace test
         id: lookupSdkVersion
-        uses: mikefarah/yq@2927a282833541e91cb3a9802209aa7b730f10aa # master
+        uses: mikefarah/yq@master
         with:
           cmd: yq -i '.b.c = 5' examples/sample.yaml

release_instructions.txt

@@ -8,6 +8,10 @@
 - git push --tags
 - use github actions to publish docker and make github release
 - check github updated yq action in marketplace
+- update github-action/Dockerfile to pin the newly published docker image digest:
+    skopeo inspect docker://docker.io/mikefarah/yq:4 | python3 -c "import sys,json; d=json.load(sys.stdin); print(d['Digest'])"
+  then update the FROM line in github-action/Dockerfile with the new digest:
+    FROM mikefarah/yq:4@sha256:<new-digest>
 
 
 - snapcraft