ci: update and lock versions of github actions used in workflows (#1256)

* ci: update actions for action.yml

* ci: update actions for codeql.yml

* ci: update actions for test.yml

* chore: use node 22

.github/actions/setup/action.yml

@@ -3,11 +3,11 @@ name: Setup Node & Install dependencies
 runs:
   using: composite
   steps:
-    - uses: pnpm/action-setup@v4
+    - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # [email protected]
       with:
         version: 10.2.0
 
-    - uses: actions/setup-node@v3
+    - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # [email protected]
       with:
         node-version-file: ".nvmrc"
         registry-url: https://registry.npmjs.org

.github/workflows/codeql.yml

@@ -19,12 +19,12 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # [email protected]
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@af56b044b5d41c317aef5d19920b3183cb4fbbec # pin@v2.19.2
+        uses: github/codeql-action/init@7e3036b9cd87fc26dd06747b7aa4b96c27aaef3a # pin@v2.20.3
         with:
           queries: security-and-quality
           languages: javascript-typescript
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@af56b044b5d41c317aef5d19920b3183cb4fbbec # pin@v2.19.2
+        uses: github/codeql-action/analyze@7e3036b9cd87fc26dd06747b7aa4b96c27aaef3a # pin@v2.20.3
         with:
           category: "/language:javascript-typescript"

.github/workflows/test.yml

@@ -37,7 +37,7 @@ jobs:
         uses: ./.github/actions/setup
 
       - name: Install Foundry
-        uses: foundry-rs/foundry-toolchain@8f1998e9878d786675189ef566a2e4bf24869773 # pin@v1.2.0
+        uses: foundry-rs/foundry-toolchain@de808b1eea699e761c404bda44ba8f21aba30b2c # pin@v1.3.1
 
       - name: Install Playwright dependencies
         run: pnpm dlx [email protected] install-deps
@@ -70,7 +70,7 @@ jobs:
           xvfb-run pnpm run test:playwright:headful
 
       - name: Archive Playwright report
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # [email protected]
         if: success() || failure()
         with:
           name: playwright-report-headful

.nvmrc

@@ -1 +1 @@
-v23.7.0
+v22.13.1