ci: fix more zizmor warnings

.github/workflows/autofix.yml

@@ -15,7 +15,7 @@ jobs:
   autofix:
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: Boshen/setup-rust@main
         with:

.github/workflows/benchmark.yml

@@ -74,7 +74,7 @@ jobs:
 
     steps:
       - name: Checkout Branch
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - uses: Boshen/setup-rust@main
         with:
@@ -125,7 +125,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Branch
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - uses: Boshen/setup-rust@main
         with:
@@ -164,7 +164,7 @@ jobs:
 
     steps:
       - name: Checkout Branch
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - name: Download Binary
         uses: actions/download-artifact@v4
@@ -216,7 +216,7 @@ jobs:
   # if: false
   # steps:
   # - name: Checkout Branch
-  # uses: taiki-e/checkout-action@v1
+  # uses: taiki-e/checkout-action@v1.3.1
 
   # - uses: Boshen/setup-rust@main
   # with:
@@ -288,7 +288,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Branch
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - uses: ./.github/actions/pnpm
 

.github/workflows/bloat.yml

@@ -14,7 +14,7 @@ jobs:
     name: Cargo Bloat
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: Boshen/setup-rust@main
         with:

.github/workflows/cargo-llvm-lines.yml

@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - uses: Boshen/setup-rust@main
 

.github/workflows/ci.yml

@@ -35,7 +35,7 @@ jobs:
           - os: macos-latest
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: Boshen/setup-rust@main
         with:
           # warm cache factory for all other CI jobs
@@ -51,7 +51,7 @@ jobs:
     if: ${{ github.ref_name == 'main' }}
     runs-on: windows-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       # Unsung heros of the internet, who led me here to speed up window's slowness:
       # https://github.com/actions/cache/issues/752#issuecomment-1847036770
       # https://github.com/astral-sh/uv/blob/502e04200d52de30d3159894833b3db4f0d6644d/.github/workflows/ci.yml#L158
@@ -106,21 +106,21 @@ jobs:
       # Insta is not able to run on wasmtime, omit the packages that depend on it
       TEST_FLAGS: "-p oxc_ast -p oxc_cfg -p oxc_regular_expression -- --nocapture"
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: Boshen/setup-rust@main
         with:
           cache-key: wasi
           save-cache: ${{ github.ref_name == 'main' }}
       - run: rustup target add wasm32-wasip1-threads
-      - uses: bytecodealliance/actions/wasmtime/setup@v1
+      - uses: bytecodealliance/actions/wasmtime/setup@v1.3.1
       - run: cargo test --target wasm32-wasip1-threads ${TEST_FLAGS}
       - run: git diff --exit-code # Must commit everything
 
   test-wasm32-unknown-unknown:
     name: Check wasm32-unknown-unknown
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: Boshen/setup-rust@main
         with:
@@ -146,7 +146,7 @@ jobs:
     name: Spell Check
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: crate-ci/[email protected]
         with:
           files: .
@@ -155,7 +155,7 @@ jobs:
     name: Clippy
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: Boshen/setup-rust@main
         with:
           save-cache: ${{ github.ref_name == 'main' }}
@@ -176,7 +176,7 @@ jobs:
     name: Doc
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: Boshen/setup-rust@main
         with:
           cache-key: warm
@@ -187,7 +187,7 @@ jobs:
     name: Conformance
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: dorny/paths-filter@v3
         id: filter
@@ -234,7 +234,7 @@ jobs:
     name: Minification Size
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: dorny/paths-filter@v3
         id: filter
@@ -262,7 +262,7 @@ jobs:
     name: AST Changes
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: dorny/paths-filter@v3
         id: filter
@@ -303,7 +303,7 @@ jobs:
     name: Test NAPI
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: dorny/paths-filter@v3
         id: filter
         with:

.github/workflows/ci_vscode.yml

@@ -28,7 +28,7 @@ jobs:
     name: Compile
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: ./.github/actions/pnpm
 
       - name: Compile VSCode
@@ -39,7 +39,7 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: ./.github/actions/pnpm
 
       - name: Lint VSCode
@@ -50,7 +50,7 @@ jobs:
     name: Type-Check
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: ./.github/actions/pnpm
 
       - name: Type-Check VSCode
@@ -61,7 +61,7 @@ jobs:
     name: Test
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: ./.github/actions/pnpm
 
       - name: Test VSCode

.github/workflows/codecov.yml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - name: Clone submodules
         uses: ./.github/actions/clone-submodules
@@ -56,7 +56,7 @@ jobs:
     steps:
       - name: Checkout
         if: env.CODECOV_TOKEN
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - name: Download coverage file
         if: env.CODECOV_TOKEN

.github/workflows/deny.yml

@@ -25,7 +25,7 @@ jobs:
     name: Cargo Deny
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: Boshen/setup-rust@main
         with:

.github/workflows/link-check.yml

@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - name: Check Links
         uses: lycheeverse/lychee-action@master

.github/workflows/lint-rules.yml

@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Branch
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - uses: actions/setup-node@v4
         with:

.github/workflows/miri.yml

@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: taiki-e/checkout-action@v1
+        uses: taiki-e/checkout-action@v1.3.1
 
       - uses: Boshen/setup-rust@main
         with:

.github/workflows/pr.yml

@@ -16,7 +16,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: actions/labeler@v5
 
@@ -78,7 +78,7 @@ jobs:
           echo "CATEGORY=$CATEGORY" >> $GITHUB_OUTPUT
 
       - name: Add category label
-        uses: actions-ecosystem/action-add-labels@v1
+        uses: actions-ecosystem/action-add-labels@v1.3.1
         if: ${{ steps.get-category.outputs.CATEGORY != '' }}
         with:
           labels: ${{ steps.get-category.outputs.CATEGORY }}

.github/workflows/prepare_release_crates.yml

@@ -12,7 +12,7 @@ jobs:
     name: Check
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
       - uses: Boshen/setup-rust@main
         with:
           cache-key: warm
@@ -34,7 +34,7 @@ jobs:
     name: Trigger Monitor Oxc
     runs-on: ubuntu-latest
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: peter-evans/create-or-update-comment@v4
         id: comment
@@ -43,7 +43,7 @@ jobs:
           issue-number: ${{ needs.prepare.outputs.pull-request-number }}
           body: Triggering Monitor Oxc https://github.com/oxc-project/monitor-oxc/actions/workflows/ci.yml
 
-      - uses: benc-uk/workflow-dispatch@v1
+      - uses: benc-uk/workflow-dispatch@v1.3.1
         with:
           repo: oxc-project/monitor-oxc
           workflow: ci.yml

.github/workflows/prepare_release_oxlint.yml

@@ -27,7 +27,7 @@ jobs:
       pull-requests: write
       contents: write
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: peter-evans/create-or-update-comment@v4
         id: comment
@@ -36,7 +36,7 @@ jobs:
           issue-number: ${{ needs.prepare.outputs.pull-request-number }}
           body: Triggering Ecosystem CI https://github.com/oxc-project/oxlint-ecosystem-ci/actions/workflows/ci.yml
 
-      - uses: benc-uk/workflow-dispatch@v1
+      - uses: benc-uk/workflow-dispatch@v1.3.1
         with:
           repo: oxc-project/oxlint-ecosystem-ci
           workflow: ci.yml
@@ -51,8 +51,8 @@ jobs:
     permissions:
       actions: write
     steps:
-      - uses: taiki-e/checkout-action@v1
-      - uses: benc-uk/workflow-dispatch@v1
+      - uses: taiki-e/checkout-action@v1.3.1
+      - uses: benc-uk/workflow-dispatch@v1.3.1
         with:
           repo: oxc-project/oxc-project.github.io
           workflow: release.yml

.github/workflows/release_napi_parser.yml

@@ -23,7 +23,7 @@ jobs:
       version: ${{ env.version }}
       version_changed: ${{ steps.version.outputs.changed }}
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - name: Check version changes
         uses: EndBug/version-check@v2
@@ -88,7 +88,7 @@ jobs:
     name: Package ${{ matrix.target }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       ### install musl dependencies ###
       #
@@ -168,7 +168,7 @@ jobs:
     needs:
       - build
     steps:
-      - uses: taiki-e/checkout-action@v1
+      - uses: taiki-e/checkout-action@v1.3.1
 
       - uses: ./.github/actions/pnpm
 
@@ -178,7 +178,7 @@ jobs:
           merge-multiple: true
 
       - name: Unzip
-        uses: montudor/action-zip@v1
+        uses: montudor/action-zip@v1.3.1
         with:
           args: unzip -qq *.zip -d .