chore(ci): bump GitHub Actions

- actions/setup-node: v6 -> v7
- aquasecurity/trivy-action: 0.35.0 -> 0.36.0

Author: josecelano

.github/workflows/docs-lint.yaml

@@ -41,7 +41,7 @@ jobs:
 
       - id: node
         name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: "20"
 

.github/workflows/security-scan.yaml

@@ -61,7 +61,7 @@ jobs:
       # Human-readable output in logs
       # This NEVER fails the job; it's only for visibility
       - name: Display vulnerabilities (table format)
-        uses: aquasecurity/trivy-action@0.35.0
+        uses: aquasecurity/trivy-action@0.36.0
         with:
           image-ref: ${{ steps.image-source.outputs.image }}
           format: "table"
@@ -75,7 +75,7 @@ jobs:
       # - Trivy sometimes exits with 1 even when no vulns exist
       # - GitHub Security UI is responsible for enforcement
       - name: Generate SARIF (Code Scanning)
-        uses: aquasecurity/trivy-action@0.35.0
+        uses: aquasecurity/trivy-action@0.36.0
         with:
           image-ref: ${{ steps.image-source.outputs.image }}
           format: "sarif"

.github/workflows/testing.yaml

@@ -51,7 +51,7 @@ jobs:
 
       - id: node
         name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: "20"