chore: bump the github-actions group with 1 update (#1484)

* chore: bump the github-actions group with 1 update

Bumps the github-actions group with 1 update: [hashicorp/vault-action](https://github.com/hashicorp/vault-action).


Updates `hashicorp/vault-action` from 2.7.4 to 3.0.0
- [Release notes](https://github.com/hashicorp/vault-action/releases)
- [Changelog](https://github.com/hashicorp/vault-action/blob/main/CHANGELOG.md)
- [Commits](hashicorp/vault-action@v2.7.4...v3.0.0)

---
updated-dependencies:
- dependency-name: hashicorp/vault-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore: update setup-node and vault-action manually

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Alberto Delgado Roda <[email protected]>

.github/workflows/release.yml

@@ -59,7 +59,7 @@ jobs:
 
       - name: Read NPM vault TOTP
         if: inputs.dry-run == false
-        uses: hashicorp/vault-action@v2.7.4
+        uses: hashicorp/vault-action@v3.0.0
         with:
           method: approle
           url: ${{ secrets.VAULT_ADDR }}
@@ -90,7 +90,7 @@ jobs:
         run: npm run ci:release
 
       - name: Read GCE vault secrets
-        uses: hashicorp/vault-action@v2.7.4
+        uses: hashicorp/vault-action@v3.0.0
         with:
           method: approle
           url: ${{ secrets.VAULT_ADDR }}

.github/workflows/run-test/action.yml

@@ -34,13 +34,13 @@ inputs:
 runs:
   using: "composite"
   steps:
-    - uses: actions/setup-node@v3
+    - uses: actions/setup-node@v4
       with:
         node-version-file: '.nvmrc'
     - name: Pull and build docker infra
       run: './.ci/scripts/pull_and_build.sh'
       shell: bash
-    - uses: hashicorp/vault-action@v2.5.0
+    - uses: hashicorp/vault-action@v3.0.0
       if: |
         (inputs.mode == 'saucelabs')
         && (inputs.vault-url != null && inputs.vault-url != '')