chore(deps): update ci workflow deps

[mbrandenburger]

Upgrading gh workflow dependencies and pinning versions to follow security best practices.

[github-actions]

Hey @mbrandenburger 👋 thanks for the PR!
I'm your friendly PR Helper Bot 🤖 and I'll be riding shotgun on this one, keeping track of your PR's status to help you get it approved and merged.

This comment updates automatically as you push changes -- think of it as your PR's live scoreboard!
Here's the latest:

---

PR Checks

✅ DCO Sign-off -- All commits have valid sign-offs. Nice work!

---

❌ GPG Signature -- Heads up! The following commits don't have a verified GPG signature:

• 6d4c89e chore(deps): update ci workflow deps

You'll need to sign your commits with GPG (e.g. git commit -S). See the Signing Guide for a step-by-step walkthrough.

---

✅ Merge Conflicts -- No merge conflicts detected. Smooth sailing!

---

❌ Issue Link -- This PR is not linked to any issue.

Please reference an issue using a closing keyword (e.g. Fixes #123) and ensure the issue is assigned to you. Every PR needs a home!

---

⏳ All checks must pass before this PR can be reviewed. You've got this!

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request