chore: pin GitHub Actions to immutable commit SHAs (retain major tags for update tracking)

[Copilot]

Description

Pin all GitHub Actions uses: references in CI and release workflows from tag-only references to exact (immutable) commit SHAs, while keeping the major version tag as an inline comment so Dependabot can detect upstream changes and propose update PRs.

Before:

uses: actions/checkout@v6

After:

uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6

Actions updated in .github/workflows/nodejs.yml and .github/workflows/release.yml:

• actions/checkout
• actions/setup-node
• actions/upload-artifact
• actions/download-artifact
• DerLev/eslint-annotations
• softprops/action-gh-release
• codacy/codacy-coverage-reporter-action

Resolves or fixes issue: none

AI Tool Disclosure

• My contribution does not include any AI-generated content
• My contribution includes AI-generated content, as disclosed below:
  • AI Tools: GitHub Copilot
  • LLMs and versions: Claude Sonnet 4.5
  • Prompts: Pin all GitHub Actions uses: entries to exact commit SHAs while preserving major version tag comments for Dependabot compatibility

Affirmation

• My code follows the CONTRIBUTING.md guidelines

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Coverage ∅ diff coverage · +0.00% coverage variation

Metric	Results
Coverage variation	✅ +0.00% coverage variation
Diff coverage	✅ ∅ diff coverage (80.00%)

View coverage diff in Codacy

Coverage variation details

	Coverable lines	Covered lines	Coverage
Common ancestor commit (0d4acb2)	3306	3206	96.98%
Head commit (f3846b2)	3306 (+0)	3206 (+0)	96.98% (+0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details

	Coverable lines	Covered lines	Diff coverage
Pull request (#504)	0	0	∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

_{TIP This summary will be updated as you push new changes. Give us feedback}