ci: pin GitHub Actions by commit-hash

Ref: https://blog.rafaelgss.dev/why-you-should-pin-actions-by-commit-hash

.github/workflows/lint.yml

@@ -10,10 +10,10 @@ jobs:
   lint:
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v4.2.2"
+      - uses: "actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8" # v5.0.0
 
       - name: "Setup Node.js"
-        uses: "actions/setup-node@v4.1.0"
+        uses: "actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903" # v6.0.0
         with:
           node-version: "lts/*"
           cache: "npm"
@@ -30,6 +30,6 @@ jobs:
   commitlint:
     runs-on: "ubuntu-latest"
     steps:
-      - uses: "actions/checkout@v4.2.2"
+      - uses: "actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8" # v5.0.0
 
-      - uses: "wagoid/commitlint-github-action@v6.2.0"
+      - uses: "wagoid/commitlint-github-action@b948419dd99f3fd78a6548d48f94e3df7f6bf3ed" # v6.2.1

.github/workflows/release.yml

@@ -13,13 +13,13 @@ jobs:
       pull-requests: "write"
       id-token: "write"
     steps:
-      - uses: "actions/checkout@v4.2.2"
+      - uses: "actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8" # v5.0.0
         with:
           fetch-depth: 0
           persist-credentials: false
 
       - name: "Setup Node.js"
-        uses: "actions/setup-node@v4.1.0"
+        uses: "actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903" # v6.0.0
         with:
           node-version: "lts/*"
           cache: "npm"

.github/workflows/test.yml

@@ -8,12 +8,19 @@ on:
 
 jobs:
   test:
-    runs-on: "ubuntu-latest"
+    strategy:
+      fail-fast: false
+      matrix:
+        runs-on:
+          - "ubuntu-latest"
+          - "windows-latest"
+          - "macos-latest"
+    runs-on: "${{ matrix.runs-on }}"
     steps:
-      - uses: "actions/checkout@v4.2.2"
+      - uses: "actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8" # v5.0.0
 
       - name: "Setup Node.js"
-        uses: "actions/setup-node@v4.1.0"
+        uses: "actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903" # v6.0.0
         with:
           node-version: "lts/*"
           cache: "npm"

package.json

@@ -44,19 +44,19 @@
   },
   "devDependencies": {
     "@types/markdown-it": "14.1.2",
-    "@types/node": "22.15.17",
-    "editorconfig-checker": "6.0.1",
-    "eslint": "9.26.0",
-    "eslint-config-conventions": "19.2.0",
+    "@types/node": "24.9.2",
+    "editorconfig-checker": "6.1.1",
+    "eslint": "9.39.0",
+    "eslint-config-conventions": "21.1.0",
     "eslint-plugin-promise": "7.2.1",
-    "eslint-plugin-unicorn": "59.0.1",
-    "eslint-plugin-import-x": "4.11.1",
-    "globals": "16.1.0",
+    "eslint-plugin-unicorn": "62.0.0",
+    "eslint-plugin-import-x": "4.16.1",
+    "globals": "16.4.0",
     "markdownlint": "0.38.0",
-    "markdownlint-cli2": "0.18.0",
-    "prettier": "3.5.3",
-    "semantic-release": "24.2.3",
-    "typescript-eslint": "8.32.0",
-    "typescript": "5.8.3"
+    "markdownlint-cli2": "0.18.1",
+    "prettier": "3.6.2",
+    "semantic-release": "25.0.1",
+    "typescript-eslint": "8.46.2",
+    "typescript": "5.9.3"
   }
 }