chore: update action versions in workflow files

[wroersma]

This pull request includes updates to various GitHub Actions workflows to use specific commit SHAs for action versions, ensuring consistency and stability. The most important changes include updating the actions/checkout, actions/setup-node, changesets/action, actions/github-script, and hmarr/auto-approve-action to specific versions.

Updates to GitHub Actions workflows:

• .github/workflows/changeset-release.yml: Updated actions/checkout to 11bd71901bbe5b1630ceea73d27597364c9af683 (v4.2.2), actions/setup-node to cdca7365b2dadb8aad0a33bc7601856ffabcc48e (v4.3.0), changesets/action to 06245a4e0a36c064a573d4150030f5ec548e4fcc (v1.4.10), actions/github-script to 60a0d83039c74a4aee543508d2ffcb1c3799cdea (v7.0.1), and hmarr/auto-approve-action to f0939ea97e9205ef24d872e76833fa908a770363 (v4.0.0). [1] [2] [3] [4] [5]

• .github/workflows/code-qa.yml: Updated actions/checkout to 11bd71901bbe5b1630ceea73d27597364c9af683 (v4.2.2) and actions/setup-node to cdca7365b2dadb8aad0a33bc7601856ffabcc48e (v4.3.0) in multiple steps. [1] [2] [3] [4] [5] [6]

• .github/workflows/codeql.yml: Updated actions/checkout to 11bd71901bbe5b1630ceea73d27597364c9af683 (v4.2.2).

• .github/workflows/marketplace-publish.yml: Updated actions/checkout to 11bd71901bbe5b1630ceea73d27597364c9af683 (v4.2.2) and actions/setup-node to cdca7365b2dadb8aad0a33bc7601856ffabcc48e (v4.3.0).

• .github/workflows/update-contributors.yml: Updated actions/checkout to 11bd71901bbe5b1630ceea73d27597364c9af683 (v4.2.2), actions/setup-node to cdca7365b2dadb8aad0a33bc7601856ffabcc48e (v4.3.0), and peter-evans/create-pull-request to 271a8d0340265f705b14b6d32b9829c1cb33d45e (v7.0.8). [1] [2]

---

Important

Update GitHub Actions workflows to use specific commit SHAs for action versions for consistency and stability.

• Workflows Updated:
  • .github/workflows/changeset-release.yml: Updated actions/checkout to 11bd71901bbe5b1630ceea73d27597364c9af683 (v4.2.2), actions/setup-node to cdca7365b2dadb8aad0a33bc7601856ffabcc48e (v4.3.0), changesets/action to 06245a4e0a36c064a573d4150030f5ec548e4fcc (v1.4.10), actions/github-script to 60a0d83039c74a4aee543508d2ffcb1c3799cdea (v7.0.1), and hmarr/auto-approve-action to f0939ea97e9205ef24d872e76833fa908a770363 (v4.0.0).
  • .github/workflows/code-qa.yml: Updated actions/checkout and actions/setup-node to the same versions as above in multiple steps.
  • .github/workflows/codeql.yml: Updated actions/checkout to 11bd71901bbe5b1630ceea73d27597364c9af683 (v4.2.2).
  • .github/workflows/marketplace-publish.yml: Updated actions/checkout and actions/setup-node to the same versions as above.
  • .github/workflows/update-contributors.yml: Updated actions/checkout and actions/setup-node to the same versions as above.

^{This description was created by for d532d62. It will automatically update as commits are pushed.}

[changeset-bot]

⚠️ No Changeset found

Latest commit: d532d62

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[daniel-lxs]

Thanks for your contribution. We genuinely apologize for letting your PR get caught up in the messy state of our old PR process. You deserved better, and it's entirely our fault for taking so long.

We're closing this PR because we'd prefer to see an issue created about this. We've now shifted to a clearer issue-first workflow to avoid this kind of situation going forward. If you want to revisit this please open a new issue.

We truly appreciate your patience and would be happy to have you continue contributing.