Merge pull request #1307 from G-Rath/update-actions

ci: update `actions/checkout` and disable persisted git credentials

Author: justin808

.github/workflows/rubocop.yml

@@ -12,7 +12,9 @@ jobs:
         ruby: ['2.7', '3.0']
 
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: ${{ matrix.ruby }}

.github/workflows/ruby.yml

@@ -17,7 +17,9 @@ jobs:
         ruby: [2.7]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
+        with:
+          persist-credentials: false
       - uses: actions/setup-node@v3
       - name: Save root node_modules to cache
         uses: actions/cache@v3
@@ -66,7 +68,9 @@ jobs:
       # having to do with automatic kwarg splatting
       MT_KWARGS_HACK: 1
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
+      with:
+        persist-credentials: false
     - uses: actions/setup-node@v3
     - run: npm -g install yalc
     - run: yalc publish