ci: upgrade GitHub Actions versions

[czirker]

Summary

• Upgrades actions/checkout v3 to v4, actions/setup-node v3 to v4
• Upgrades github/codeql-action v2 to v3

Task Reference

• Jira: https://chb.atlassian.net/browse/ES-2708
• Parent: https://chb.atlassian.net/browse/ES-2701

Changes Made

• node.js.yml: Upgraded checkout and setup-node
• npm-publish.yml: Upgraded checkout and setup-node
• codeql-analysis.yml: Upgraded checkout and codeql-action

Note

Lint step will be added after ESLint is configured (ES-2709).

Checklist

• All GitHub Actions on latest major versions

Made with Cursor

---

Note

Low Risk
Low risk: this only bumps GitHub Actions major versions in CI/security workflows and doesn’t change runtime code. Main risk is CI or CodeQL behavior changes due to new action defaults.

Overview
Upgrades GitHub Actions used by CI, release publishing, and CodeQL scanning: actions/checkout moves from v3 to v4, actions/setup-node from v3 to v4, and github/codeql-action (init/autobuild/analyze) from v2 to v3.

No workflow logic, scripts, or build steps change beyond the action version bumps.

^{Written by Cursor Bugbot for commit d3e8e8d. This will update automatically on new commits. Configure here.}

[ch-snyk-sa]

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.