Update workflows based on zizmor audit

Author: GarboMuffin

.github/workflows/node.js.yml

@@ -7,11 +7,13 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
+      with:
+        persist-credentials: false
     - name: Install Node.js
-      uses: actions/setup-node@v3
+      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af
       with:
-        node-version: 16.x
+        node-version: 20
     - name: Install dependencies
       run: npm ci
     - name: Run tests