chore(deps): update all non-major dependencies (#242)

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/ci.yml

@@ -25,11 +25,11 @@ jobs:
       contents: write # Needed to push the PR preview to the gh-pages branch
       pull-requests: write # Needed to comment the preview link on the PR
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
         with:
           fetch-depth: 0
           persist-credentials: false
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
         with:
           node-version: 24
           cache: npm

.github/workflows/ossf-scorecard.yml

@@ -11,7 +11,7 @@ permissions:
 
 jobs:
   scorecard:
-    uses: platform-mesh/.github/.github/workflows/job-ossf-scorecard.yml@068efd5c6c7a6d0c4b28f5887de7ca156cb5f7b8 # main
+    uses: platform-mesh/.github/.github/workflows/job-ossf-scorecard.yml@916c21a99d770c8917af03baec822c3c5a3e1140 # main
     permissions:
       security-events: write # Needed to upload Scorecard results to the GitHub Security tab
       id-token: write # Needed for keyless publishing of Scorecard results

.github/workflows/release.yml

@@ -20,11 +20,11 @@ jobs:
     permissions:
       contents: write # Needed to push the built site to the gh-pages branch
     steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
         with:
           fetch-depth: 0
           persist-credentials: false
-      - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
         with:
           node-version: 24
           cache: npm # zizmor: ignore[cache-poisoning]

.github/workflows/zizmor.yml

@@ -17,7 +17,7 @@ concurrency:
 
 jobs:
   zizmor:
-    uses: platform-mesh/.github/.github/workflows/job-zizmor.yml@03e076ff9aebe43ead6b9d77f3bb764a9d411347 # main
+    uses: platform-mesh/.github/.github/workflows/job-zizmor.yml@916c21a99d770c8917af03baec822c3c5a3e1140 # main
     with:
       persona: 'auditor'
     permissions: