chore(ci): bump actions in build-xapian.yml (dependabot pull request)

build-xapian isn't used anymore. But it is a template for testing
parts of the ci-tst workflow in isolation to try to fix issues.

Author: rouilj

.github/workflows/build-xapian.yml

@@ -42,11 +42,11 @@ jobs:
         # if: {{ false }}
           # continue running if step fails
         # continue-on-error: true
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
         # Setup version of Python to use
       - name: Set Up Python 3.13
-        uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
+        uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
         with:
           python-version: 3.13
           allow-prereleases: true