Update GHA dependencies

[ulgens]

Updates outdated external GHA dependencies

Two notes:

• These type of dependency updates can be automated with Renovate
• Both of the existing workflows are missing some common security practices. Those can be detected and fixed by zizmor

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 71.84%. Comparing base (b9db550) to head (425f879).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #329      +/-   ##
==========================================
+ Coverage   71.65%   71.84%   +0.18%     
==========================================
  Files          23       23              
  Lines        9911     9938      +27     
==========================================
+ Hits         7102     7140      +38     
+ Misses       2809     2798      -11     

Flag	Coverage Δ
unittests	71.84% <ø> (+0.18%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[JWock82]

Thanks for updating this!