chore: upgrade GitHub Actions to latest versions (#1796)

Signed-off-by: Salman Muin Kayser Chishti <13schishti@gmail.com>

Author: salmanmkc

.github/workflows/release-ui-tars.yml

@@ -180,7 +180,7 @@ jobs:
           cat ./scripts/merge-yml/latest-mac.yml
           echo "releaseName=$(cat ./scripts/merge-yml/latest-mac.yml | grep version | cut -d' ' -f2)" >> $GITHUB_OUTPUT
       - name: Upload to Release
-        uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631
+        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b  # v2.5.0
         with:
           fail_on_unmatched_files: true
           tag_name: v${{ steps.merge_yaml.outputs.releaseName }}

.github/workflows/scorecard.yml

@@ -59,6 +59,6 @@ jobs:
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
+        uses: github/codeql-action/upload-sarif@59c2c1ca13dff455ab22ad8157d6ab220447da29  # v4
         with:
           sarif_file: results.sarif

.github/workflows/secretlint.yml

@@ -21,7 +21,7 @@ jobs:
           fetch-depth: 0
       - name: Get changed files
         id: changed-files
-        uses: tj-actions/changed-files@2d756ea4c53f7f6b397767d8723b3a10a9f35bf2 # v44
+        uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62  # v47.0.1
       - name: setup Node ${{ matrix.node-version }}
         uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:

.github/workflows/test.yml

@@ -47,7 +47,7 @@ jobs:
         with:
           node-version: 20
           cache: 'pnpm'
-      - uses: browser-actions/setup-chrome@v1
+      - uses: browser-actions/setup-chrome@v2
         with:
           chrome-version: 120
           install-dependencies: true
@@ -58,7 +58,7 @@ jobs:
       - name: Run test
         run: npm exec turbo run coverage
       - name: Upload coverage data
-        uses: codecov/codecov-action@13ce06bfc6bbe3ecf90edbbf1bc32fe5978ca1d3 # v5.3.1
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de  # v5.5.2
         with:
           fail_ci_if_error: true
           disable_search: true