fix: swap to commit sha

Author: MrMuzyk

.github/scripts/verifyActions.sh

@@ -2,7 +2,7 @@
 #
 # Re-compiles all Github Actions and verifies that there is no diff,
 # because that would indicate that the PR author forgot to run `npm run gh-actions-build`
-# and commit the re-bundled the javascript sources.
+# and commit the rebuilt javascript sources.
 
 declare -r GREEN='\033[0;32m'
 declare -r RED='\033[0;31m'

.github/workflows/validateGithubActions.yml

@@ -9,18 +9,18 @@ jobs:
     verify:
         runs-on: ubuntu-latest
         steps:
-            - name: Checkout
-              # v4.1.1
-              uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
+            # v5.0.0
+            - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493
 
             - name: Setup Node
-              uses: actions/setup-node@v4
+              # v4.4.0
+              uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e
               with:
-                  node-version-file: .nvmrc
+                  node-version-file: ".nvmrc"
                   cache: npm
+                  cache-dependency-path: package-lock.json
 
-            - name: Install dependencies
-              run: npm ci
+            - run: npm ci
 
             - name: Verify Javascript Action Builds
               run: ./.github/scripts/verifyActions.sh