Dependency updates (js & GH Actions) (#2209)

# Goal
The goal of this PR is regular updates of GitHub Actions and JS
packages.

All GH Actions were checked and added to the allowlist

Author: wilwade

.github/workflows/common/try-runtime-migrations/action.yml

@@ -24,7 +24,7 @@ runs:
       shell: bash
 
     - name: Run runtime checks
-      uses: paritytech/try-runtime-gha@v0.1.0
+      uses: paritytech/try-runtime-gha@v0.2.0
       with:
         runtime-package: ${{ inputs.runtime-package }}
         node-uri: ${{ inputs.runtime-uri }}

.github/workflows/release.yml

@@ -201,7 +201,7 @@ jobs:
         run: sha256sum ${{env.RELEASE_BIN_FILENAME}} > ${{env.RELEASE_BIN_FILENAME}}.sha256
       - name: Import GPG key
         id: import-gpg
-        uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4
+        uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5
         with:
           gpg_private_key: ${{secrets.FREQUENCY_PGP_SECRET_SUBKEYS}}
           passphrase: ${{secrets.FREQUENCY_PGP_MASTER_KEY_PASSWORD}}
@@ -507,7 +507,7 @@ jobs:
         with:
           full-release-version-tag: ${{env.LATEST_FULL_RELEASE_TAG}}
       - name: Fetch Reference Binary
-        uses: robinraju/release-downloader@c39a3b234af58f0cf85888573d361fb6fa281534
+        uses: robinraju/release-downloader@a96f54c1b5f5e09e47d9504526e96febd949d4c2
         with:
           tag: ${{steps.get-previous-full-release-version.outputs.version}}
           fileName: ${{env.BIN_FILENAME}}
@@ -666,7 +666,7 @@ jobs:
           tera --version
       - name: Build Changelog
         id: build-changelog
-        uses: mikepenz/release-changelog-builder-action@f3fc77b47b74e78971fffecb2102ae6eac9a44d6
+        uses: mikepenz/release-changelog-builder-action@32e3c96f29a6532607f638797455e9e98cfc703d
         env:
           GITHUB_TOKEN: ${{ github.token }}
         with:
@@ -760,7 +760,7 @@ jobs:
             > release-notes.md
       - name: Publish Release Candidate on GitHub
         if: steps.is-full-release.outputs.is-full-release != 'true'
-        uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191
+        uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8
         with:
           name: "[Release Candidate] ${{env.NEW_RELEASE_TAG}}"
           prerelease: true
@@ -772,7 +772,7 @@ jobs:
             /tmp/polkadot-api-types-json/json/types.json
       - name: Publish Full Release on GitHub
         if: steps.is-full-release.outputs.is-full-release == 'true'
-        uses: softprops/action-gh-release@9d7c94cfd0a1f3ed45544c887983e9fa900f0564
+        uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8
         with:
           body_path: tools/ci/release-notes/release-notes.md
           tag_name: ${{env.NEW_RELEASE_TAG}}

e2e/package-lock.json

@@ -22,8 +22,8 @@
     "@helia/unixfs": "^4.0.0",
     "@noble/curves": "^1.6.0",
     "@polkadot-api/merkleize-metadata": "^1.1.9",
-    "@polkadot/api": "14.2.1",
-    "@polkadot/types": "14.2.1",
+    "@polkadot/api": "14.2.2",
+    "@polkadot/types": "14.2.2",
     "@polkadot/util": "13.2.2",
     "helia": "^5.1.0",
     "multiformats": "^13.3.1",
@@ -37,7 +37,7 @@
     "eslint": "^9.13.0",
     "eslint-plugin-mocha": "^10.5.0",
     "globals": "^15.11.0",
-    "mocha": "^10.8.1",
+    "mocha": "^10.8.2",
     "prettier": "^3.3.3",
     "sinon": "^19.0.2",
     "tsx": "^4.19.2",