Merge branch 'trunk' into james/security-update

Signed-off-by: James Pond <james@cipher.host>

Author: jamesponddotco

.github/workflows/ci.yml

@@ -35,7 +35,7 @@ jobs:
     runs-on: 'ubuntu-latest'
     name: 'Tests'
     steps:
-      - uses: 'step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e' # v2.10.4
+      - uses: 'step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf' # v2.11.1
         with:
           egress-policy: 'audit'
 
@@ -44,12 +44,12 @@ jobs:
           persist-credentials: 'false'
 
       - name: 'Setup Go environment'
-        uses: 'actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34' # v5.3.0
+        uses: 'actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b' # v5.4.0
         with:
           go-version: '>=1.24'
 
       - name: 'Setup Node.js environment'
-        uses: 'actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a' # v4.2.0
+        uses: 'actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020' # v4.4.0
         with:
           node-version: 'latest'
 

.github/workflows/lint-licenses.yml

@@ -16,7 +16,7 @@ jobs:
     name: 'Check all files'
     runs-on: 'ubuntu-latest'
     steps:
-      - uses: 'step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e' # v2.10.4
+      - uses: 'step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf' # v2.11.1
         with:
           egress-policy: 'audit'
 
@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: 'Setup Python environment'
-        uses: 'actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38' # v5.4.0
+        uses: 'actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55' # v5.5.0
         with:
           python-version: '3.13'
 

.github/workflows/lint.yml

@@ -28,7 +28,7 @@ jobs:
     name: 'Lint all files'
     runs-on: 'ubuntu-latest'
     steps:
-      - uses: 'step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e' # v2.10.4
+      - uses: 'step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf' # v2.11.1
         with:
           egress-policy: 'audit'
 
@@ -37,12 +37,12 @@ jobs:
           persist-credentials: false
 
       - name: 'Setup Go environment'
-        uses: 'actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34' # v5.3.0
+        uses: 'actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b' # v5.4.0
         with:
           go-version: '>=1.24'
 
       - name: 'Setup Node.js environment'
-        uses: 'actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a' # v4.2.0
+        uses: 'actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020' # v4.4.0
         with:
           node-version: 'latest'