SEC-090: Automated trusted workflow pinning (2024-10-21)

[hashicorp-tsccr[bot]]

Bumping GitHub Actions version to latest TSCCR release.

• changes in .github/workflows/ci-changie.yml
  • bump actions/checkout from v4.2.0 to v4.2.1 (release notes)
• changes in .github/workflows/ci-github-actions.yml
  • bump actions/checkout from v4.2.0 to v4.2.1 (release notes)
• changes in .github/workflows/ci-go.yml
  • bump actions/checkout from v4.2.0 to v4.2.1 (release notes)
  • bump actions/checkout from v4.2.0 to v4.2.1 (release notes)
  • bump actions/checkout from v4.2.0 to v4.2.1 (release notes)
  • bump actions/checkout from v4.2.0 to v4.2.1 (release notes)
  • bump actions/upload-artifact from v4.4.0 to v4.4.3 (release notes)
• changes in .github/workflows/ci-goreleaser.yml
  • bump actions/checkout from v4.2.0 to v4.2.1 (release notes)
• changes in .github/workflows/compliance.yml
  • bump actions/checkout from v4.2.0 to v4.2.1 (release notes)
• changes in .github/workflows/release.yml
  • bump actions/checkout from v4.2.0 to v4.2.1 (release notes)
  • bump actions/checkout from v4.2.0 to v4.2.1 (release notes)
  • bump actions/checkout from v4.2.0 to v4.2.1 (release notes)
  • bump actions/checkout from v4.2.0 to v4.2.1 (release notes)

This PR was auto-generated by security-tsccr/actions/runs/11434185446

You can alter the configuration of this automation via the hcl config in security-tsccr/automation

This PR can be regenerated by dispatching the GitHub workflow Pin Action Refs. Please reach out to #team-prodsec if you have any questions.