chore(github): update github actions

Author: JamieMason

.github/workflows/benchmark.yaml

@@ -14,13 +14,13 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install rust toolchain
         uses: dtolnay/rust-toolchain@stable
       - name: Set up cargo cache
-        uses: Swatinem/rust-cache@v2
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
       - name: Install just
-        uses: extractions/setup-just@v1
+        uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4.0.0
         with:
           just-version: 1.35.0
       - name: Install hyperfine

.github/workflows/ci.yaml

@@ -18,7 +18,7 @@ jobs:
       build_matrix: ${{ steps.set-matrix.outputs.build_matrix }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           sparse-checkout: |
             .github/workflows/matrix.json
@@ -42,9 +42,9 @@ jobs:
         build: ${{ fromJson(needs.build-matrix.outputs.build_matrix) }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
           registry-url: "https://registry.npmjs.org"
@@ -56,9 +56,9 @@ jobs:
           targets: ${{ matrix.build.TARGET }}
           components: rustfmt, clippy
       - name: Set up cargo cache
-        uses: Swatinem/rust-cache@v2
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
       - name: Install just
-        uses: extractions/setup-just@v1
+        uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4.0.0
         with:
           just-version: 1.35.0
       - name: Check cargo

.github/workflows/release.yaml

@@ -16,7 +16,7 @@ jobs:
       build_matrix: ${{ steps.set-matrix.outputs.build_matrix }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           sparse-checkout: |
             .github/workflows/matrix.json
@@ -48,30 +48,30 @@ jobs:
           echo "matrix.build.RUN_LOCALLY : ${{ matrix.build.RUN_LOCALLY }}"
           echo "matrix.build.TARGET      : ${{ matrix.build.TARGET }}"
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
           registry-url: "https://registry.npmjs.org"
       - name: Update npm
         run: npm install -g npm@latest
       - name: Install rust toolchain
-        uses: actions-rs/toolchain@v1
+        uses: actions-rs/toolchain@b2417cde72dcf67f306c0ae8e0828a81bf0b189f # v1.0.6
         with:
           profile: minimal
           toolchain: stable
           target: ${{ matrix.build.TARGET }}
           override: true
           components: rustfmt, clippy
       - name: Set up cargo cache
-        uses: Swatinem/rust-cache@v2
+        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
       - name: Install just
-        uses: extractions/setup-just@v1
+        uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4.0.0
         with:
           just-version: 1.35.0
       - name: Build rust binary
-        uses: actions-rs/cargo@v1
+        uses: actions-rs/cargo@ae10961054e4aa8b4aa7dffede299aaf087aa33b # v1.0.1
         with:
           command: build
           args: --release --locked --target ${{ matrix.build.TARGET }}
@@ -82,7 +82,7 @@ jobs:
           just --dotenv-filename .env.${{ matrix.build.NAME }} create-npm-binary-package
           just --dotenv-filename .env.${{ matrix.build.NAME }} publish-npm-binary-package
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: syncpack-${{ matrix.build.TARGET }}
           path: target/${{ matrix.build.TARGET }}/release/syncpack
@@ -93,16 +93,16 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
         with:
           node-version: 24
           registry-url: "https://registry.npmjs.org"
       - name: Update npm
         run: npm install -g npm@latest
       - name: Install just
-        uses: extractions/setup-just@v1
+        uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 # v4.0.0
         with:
           just-version: 1.35.0
       - name: Publish the package