Build: Refer to commits of GitHub Actions, upgrade them

Also, set up automatic Dependabot updates of actions grouped into a single PR as Core does.

Closes gh-365
Ref jquery/jquery#5503
Ref jquery/api.jquery.com#1248

.github/dependabot.yml

@@ -4,3 +4,10 @@ updates:
     directory: "/"
     schedule:
       interval: monthly
+
+    # Group all dependabot version update PRs into one
+    groups:
+      github-actions:
+        applies-to: version-updates
+        patterns:
+          - "*"

.github/workflows/node.js.yml

@@ -3,10 +3,9 @@
 name: Node.js CI
 
 on:
-  push:
-    branches: [ "main" ]
   pull_request:
-    branches: [ "main" ]
+  push:
+    branches-ignore: "dependabot/**"
 
 jobs:
   build:
@@ -18,14 +17,14 @@ jobs:
         node-version: [18.x, 20.x]
 
     steps:
-    - name: Checkout
-      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-    - name: Install xmllint
-      run: sudo apt-get install -y libxml2-utils
-    - name: Use Node.js ${{ matrix.node-version }}
-      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
-      with:
-        node-version: ${{ matrix.node-version }}
-        cache: 'npm'
-    - run: npm ci
-    - run: npm test
+      - name: Checkout
+        uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
+      - name: Install xmllint
+        run: sudo apt-get install -y libxml2-utils
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: 'npm'
+      - run: npm ci
+      - run: npm test