Bump the github-actions group with 4 updates

.github/workflows/repo-ci.yml

@@ -14,7 +14,7 @@ concurrency:
 jobs:
   ci:
     name: CI
-    uses: zemd/js/.github/workflows/shared-ci.yml@b19c6d488d51366cdcfd2b131b7f4d83bfb9b502 # v4
+    uses: zemd/js/.github/workflows/shared-ci.yml@29e4b9216068b510a4d1200819ddd3f4383871ed # v4
     permissions:
       contents: read
     with:

.github/workflows/repo-release.yml

@@ -18,7 +18,7 @@ concurrency:
 jobs:
   release:
     name: Release
-    uses: zemd/js/.github/workflows/shared-release.yml@b19c6d488d51366cdcfd2b131b7f4d83bfb9b502 # v4
+    uses: zemd/js/.github/workflows/shared-release.yml@29e4b9216068b510a4d1200819ddd3f4383871ed # v4
     permissions:
       contents: read # check release state and pinned tooling
       id-token: write # npm trusted publishing (OIDC)

.github/workflows/repo-scorecard.yml

@@ -17,7 +17,7 @@ concurrency:
 jobs:
   scorecard:
     name: Scorecard
-    uses: zemd/js/.github/workflows/shared-scorecard.yml@b19c6d488d51366cdcfd2b131b7f4d83bfb9b502 # v4
+    uses: zemd/js/.github/workflows/shared-scorecard.yml@29e4b9216068b510a4d1200819ddd3f4383871ed # v4
     permissions:
       contents: read # checkout the repository for analysis
       actions: read # inspect workflow runs for dangerous patterns

.github/workflows/repo-zizmor.yml

@@ -21,6 +21,6 @@ concurrency:
 jobs:
   zizmor:
     name: zizmor
-    uses: zemd/js/.github/workflows/shared-zizmor.yml@b19c6d488d51366cdcfd2b131b7f4d83bfb9b502 # v4
+    uses: zemd/js/.github/workflows/shared-zizmor.yml@29e4b9216068b510a4d1200819ddd3f4383871ed # v4
     permissions:
       contents: read # checkout and online audits