chore: use ESM module and pin actions to latest versions

Author: erezrokah

.github/scripts/update-major-tag.js

@@ -1,7 +1,7 @@
 // @ts-check
 
 /** @param {import('@actions/github-script').AsyncFunctionArguments} args */
-module.exports = async ({ github, context }) => {
+export default async function updateMajorTag({ github, context }) {
   const tag = context.payload.release?.tag_name;
   if (!tag) {
     throw new Error("No release tag found in event payload");
@@ -42,4 +42,4 @@ module.exports = async ({ github, context }) => {
       }
     }
   }
-};
+}

.github/workflows/versioning.yml

@@ -11,9 +11,9 @@ jobs:
   actions-tagger:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
       - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
-            const fn = require('./.github/scripts/update-major-tag.js');
-            await fn({ github, context });
+            const { default: updateMajorTag } = await import('${{ github.workspace }}/.github/scripts/update-major-tag.js');
+            await updateMajorTag({ github, context });