chore: pin gha and update

[ryoppippi]

Summary by cubic

Pins and updates GitHub Actions in CI workflows to exact versions for more reliable and secure builds. No application code changes.

• Dependencies
  • actions/checkout → v5.0.0
  • actions/setup-node → v5.0.0
  • googleapis/release-please-action → v4.3.0
  • amannn/action-semantic-pull-request → v6.1.1

[Copilot]

Pull Request Overview

This PR updates GitHub Actions to pin specific commit hashes instead of using version tags, following security best practices for CI/CD workflows.

• Pins action versions using commit hashes with version comments for better security
• Updates several GitHub Actions to newer versions (v5→v6 for semantic-pull-request, v4→v5 for checkout and setup-node)
• Adds version comments alongside commit hashes for better maintainability

Reviewed Changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
.github/workflows/semantic-pull-request.yml	Updates semantic-pull-request action to v6.1.1 with commit hash
.github/workflows/release-please.yml	Pins release-please, checkout, and setup-node actions with commit hashes
.github/workflows/node-ci.yml	Updates checkout and setup-node actions to v5.0.0 with commit hashes

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[cubic-dev-ai]

No issues found across 3 files