SEC-090: Automated trusted workflow pinning (2024-05-06)

[hashicorp-tsccr[bot]]

Bumping GitHub Actions version to latest TSCCR release.

• changes in .github/workflows/ci-changie.yml
  • bump actions/checkout from v4.1.1 to v4.1.4 (release notes)
• changes in .github/workflows/ci-github-actions.yml
  • bump actions/checkout from v4.1.1 to v4.1.4 (release notes)
• changes in .github/workflows/ci-go.yml
  • bump actions/checkout from v4.1.1 to v4.1.4 (release notes)
  • bump golangci/golangci-lint-action from v4.0.0 to v5.0.0 (release notes)
  • bump actions/checkout from v4.1.1 to v4.1.4 (release notes)
  • bump actions/checkout from v4.1.1 to v4.1.4 (release notes)
  • bump actions/checkout from v4.1.1 to v4.1.4 (release notes)
  • bump actions/upload-artifact from v4.3.2 to v4.3.3 (release notes)
• changes in .github/workflows/ci-goreleaser.yml
  • bump actions/checkout from v4.1.1 to v4.1.4 (release notes)
• changes in .github/workflows/compliance.yml
  • bump actions/checkout from v4.1.1 to v4.1.4 (release notes)
• changes in .github/workflows/release.yml
  • bump actions/checkout from v4.1.1 to v4.1.4 (release notes)
  • bump actions/checkout from v4.1.1 to v4.1.4 (release notes)
  • bump actions/checkout from v4.1.1 to v4.1.4 (release notes)

This PR was auto-generated by security-tsccr/actions/runs/8964732519

You can alter the configuration of this automation via the hcl config in security-tsccr/automation

Please reach out to #team-prodsec if you have any questions.

[github-actions[bot]]

I'm going to lock this pull request because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active contributions. If you have found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.