chore(deps): update github actions (major)

.github/actions/setup-pnpm-with-dependencies/action.yaml

@@ -47,13 +47,13 @@ runs:
         pnpm --version
 
     - name: Setup Node
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
       with:
         node-version: ${{ steps.node-version.outputs.node-version }}
 
     - name: Restore Dependency Cache
       id: dependency-cache
-      uses: actions/cache/restore@v4
+      uses: actions/cache/restore@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
       with:
         path: './node_modules'
         key: ${{ steps.node-version.outputs.cache-key }}
@@ -67,7 +67,7 @@ runs:
       id: dependency-cache-save
       # So only prepare job saves cache, all consecutive parallel jobs do not attempt to re-save
       if: ${{ inputs.save-cache == 'true' && steps.dependency-cache.outputs.cache-hit != 'true' }}
-      uses: actions/cache/save@v4
+      uses: actions/cache/save@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
       with:
         path: './node_modules'
         key: ${{ steps.node-version.outputs.cache-key }}

.github/workflows/commitlint.yaml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ${{ vars.RUNS_ON }}
     timeout-minutes: 5
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           fetch-depth: 0
 

.github/workflows/no-pr-packages.yaml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ${{ vars.RUNS_ON }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: No PR preview packages
         uses: Kong/public-shared-actions/pr-previews/validate@main

.github/workflows/publish.yaml

@@ -23,13 +23,13 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup PNPM with Dependencies
         uses: ./.github/actions/setup-pnpm-with-dependencies/
 
       - name: Download build artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: vite-plugins-build-output-artifact
           path: /

.github/workflows/test.yaml

@@ -24,7 +24,7 @@ jobs:
       commit-hash: ${{ steps.workflow-variables.outputs.commit-hash }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Setup PNPM with Dependencies
         uses: ./.github/actions/setup-pnpm-with-dependencies/
@@ -46,7 +46,7 @@ jobs:
 
       - name: Upload build artifacts
         if: ${{ github.event_name == 'push' || github.event_name == 'workflow_dispatch' }}
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: vite-plugins-build-output-artifact
           path: |