fix(deps): consolidate dependency updates, bump @actions/exec to v3

.env.example

@@ -4,16 +4,16 @@
 ################################################################################
 
 ################################################################################
-#                        @github/local-action Variables                        #
+#                        @ronaldphilipsen/local-action Variables                        #
 ################################################################################
 
-# Environment variables specific to the @github/local-action tool.
+# Environment variables specific to the @ronaldphilipsen/local-action tool.
 
 ######################################################################
-# The path to a workspace that can be used by `@github/local-action` #
+# The path to a workspace that can be used by `@ronaldphilipsen/local-action` #
 # during local testing. This will be used as the root directory for  #
 # any files created by your action, as well as any environment files #
-# that are created automatically by `@github/local-action`. If you   #
+# that are created automatically by `@ronaldphilipsen/local-action`. If you   #
 # try to interact with the `@actions/artifact` or `@actions/cache`   #
 # packages, this tool will throw an error if this is not set to a    #
 # valid path.                                                        #
@@ -347,7 +347,7 @@ RUNNER_NAME="Local Action"
 # to set environment variables, outputs, and other information. These files    #
 # are created and managed by GitHub Actions.                                   #
 #                                                                              #
-# Currently these are not used by `@github/local-action`.                      #
+# Currently these are not used by `@ronaldphilipsen/local-action`.                      #
 ################################################################################
 
 ######################################################################

.github/workflows/codeql-analysis.yml

@@ -34,20 +34,22 @@ jobs:
     steps:
       - name: Checkout
         id: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          persist-credentials: false
 
       - name: Initialize CodeQL
         id: initialize
-        uses: github/codeql-action/init@v4
+        uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4
         with:
           languages: ${{ matrix.language }}
           source-root: src
           config-file: .github/codeql/codeql-config.yml
 
       - name: Autobuild
         id: autobuild
-        uses: github/codeql-action/autobuild@v4
+        uses: github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4
 
       - name: Perform CodeQL Analysis
         id: analyze
-        uses: github/codeql-action/analyze@v4
+        uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4