Update pinned action versions

[Jayden Chan (jayden-chan)]

Description of the change

Update pinned versions of all third party GitHub actions

Type of change

• Bug fix (non-breaking change that fixes an issue)
• New feature (non-breaking change that adds functionality)
• Breaking change (fix or feature that would cause existing functionality to not work as expected)
• Documentation or Development tools (readme, specs, tests, code formatting)

Checklists

Development

• Prettier was run (if applicable)

Paperwork

• This pull request has a descriptive title and information useful to a reviewer

Code review

• Security impacts of this change have been considered

[Copilot]

Pull request overview

Updates pinned GitHub Action references across the repo’s CI/release workflows to newer upstream revisions, keeping workflow dependencies current and reproducible.

Changes:

• Bump actions/checkout pin from v6.0.2 to v6.0.3 (SHA update).
• Bump actions/setup-node pin from v6.3.0 to v6.4.0 (SHA update).
• Bump actions/github-script pin from v8 to v9.0.0, and changesets/action from v1.5.1 to v1.9.0 in release/publish workflows.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
.github/workflows/tests.yml	Updates pinned checkout and setup-node SHAs used in unit test matrix runs.
.github/workflows/stencilbook.yml	Updates pinned checkout and setup-node SHAs used in Stencilbook deploy workflow.
.github/workflows/publish-package.yml	Updates pinned checkout, setup-node, and github-script SHAs in the package publish reusable workflow.
.github/workflows/mint-components-release.yml	Updates pinned checkout, setup-node, changesets/action, and github-script SHAs used in mint-components release automation.
.github/workflows/deep-forest.yml	Updates pinned checkout and setup-node SHAs used in Deep Forest sync workflow.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.