chore(ci): ran zizmor with fixes to make Actions more secure

[bartveneman]

No description provided.

[github-actions]

⚠️ Duplicate Dependencies (found: 16, threshold: 1)

📦 Package	📋 Versions
@projectwallace/css-parser	2 versions root@ @projectwallace/css-analyzer@9.9.0 @projectwallace/css-parser@0.16.0 root@ @projectwallace/css-parser@0.16.2
@babel/helper-validator-identifier	2 versions root@ @vitest/coverage-v8@4.1.9 magicast@0.5.3 @babel/parser@7.29.7 @babel/types@7.29.7 @babel/helper-validator-identifier@7.29.7 root@ tsdown@0.22.3 ... @babel/parser@8.0.0 @babel/types@8.0.0 @babel/helper-validator-identifier@8.0.2
js-tokens	2 versions root@ @vitest/coverage-v8@4.1.9 ast-v8-to-istanbul@1.0.2 js-tokens@10.0.0 root@ stylelint@17.13.0 cosmiconfig@9.0.1 parse-json@5.2.0 @babel/code-frame@7.29.7 js-tokens@4.0.0
@babel/parser	2 versions root@ @vitest/coverage-v8@4.1.9 magicast@0.5.3 @babel/parser@7.29.7 root@ tsdown@0.22.3 rolldown-plugin-dts@0.26.0 @babel/generator@8.0.0 @babel/parser@8.0.0
@babel/types	2 versions root@ @vitest/coverage-v8@4.1.9 magicast@0.5.3 @babel/parser@7.29.7 @babel/types@7.29.7 root@ tsdown@0.22.3 rolldown-plugin-dts@0.26.0 @babel/generator@8.0.0 @babel/parser@8.0.0 @babel/types@8.0.0
@babel/helper-string-parser	2 versions root@ @vitest/coverage-v8@4.1.9 magicast@0.5.3 @babel/parser@7.29.7 @babel/types@7.29.7 @babel/helper-string-parser@7.29.7 root@ tsdown@0.22.3 ... @babel/parser@8.0.0 @babel/types@8.0.0 @babel/helper-string-parser@8.0.0
hookified	2 versions root@ stylelint@17.13.0 ... @cacheable/utils@2.4.1 hashery@1.5.1 hookified@1.15.1 root@ stylelint@17.13.0 ... cacheable@2.3.5 qified@0.10.1 hookified@2.2.0
obug	2 versions root@ @vitest/coverage-v8@4.1.9 obug@2.1.1 root@ tsdown@0.22.3 obug@2.1.3
picomatch	2 versions root@ stylelint@17.13.0 fast-glob@3.3.3 micromatch@4.0.8 picomatch@2.3.2 root@ @vitest/coverage-v8@4.1.9 vitest@4.1.9 @vitest/mocker@4.1.9 vite@8.1.0 picomatch@4.0.4
supports-color	2 versions root@ stylelint@17.13.0 supports-hyperlinks@4.4.0 supports-color@10.2.2 root@ @vitest/coverage-v8@4.1.9 istanbul-lib-report@3.0.1 supports-color@7.2.0
semver	2 versions root@ @vitest/coverage-v8@4.1.9 istanbul-lib-report@3.0.1 make-dir@4.0.0 semver@7.8.1 root@ tsdown@0.22.3 semver@7.8.5
string-width	2 versions root@ stylelint@17.13.0 table@6.9.0 string-width@4.2.3 root@ stylelint@17.13.0 string-width@8.2.1
strip-ansi	2 versions root@ stylelint@17.13.0 table@6.9.0 string-width@4.2.3 strip-ansi@6.0.1 root@ stylelint@17.13.0 string-width@8.2.1 strip-ansi@7.2.0
ansi-regex	2 versions root@ stylelint@17.13.0 table@6.9.0 string-width@4.2.3 strip-ansi@6.0.1 ansi-regex@5.0.1 root@ stylelint@17.13.0 string-width@8.2.1 strip-ansi@7.2.0 ansi-regex@6.2.2
has-flag	2 versions root@ @vitest/coverage-v8@4.1.9 istanbul-lib-report@3.0.1 supports-color@7.2.0 has-flag@4.0.0 root@ stylelint@17.13.0 supports-hyperlinks@4.4.0 has-flag@5.0.1
tinyexec	2 versions root@ @vitest/coverage-v8@4.1.9 vitest@4.1.9 tinyexec@1.2.3 root@ tsdown@0.22.3 tinyexec@1.2.4

💡 To find out what depends on a specific package, run: pnpm -r why example-package

📦 Package Bundle Size

No bundle size changes.