ci: Update Node.js versions and action dependencies for Node 24 compa…

[alexs-mparticle]

…tibility

GitHub Actions runners are deprecating Node 20 in favor of Node 24. This updates application Node.js versions to 24.x and bumps third-party actions to versions that support the Node 24 runtime. Third-party actions are pinned to commit SHAs for supply chain security.

Background

• {Explain the context of the change, including the problem it addresses or relevant background information}

What Has Changed

• {Describe the changes introduced by this PR}

Screenshots/Video

• {Include any screenshots or video demonstrating the new feature or fix, if applicable}

Checklist

• I have performed a self-review of my own code.
• I have made corresponding changes to the documentation.
• I have added tests that prove my fix is effective or that my feature works.
• I have tested this locally.

Additional Notes

• {Any additional information or context relevant to this PR}

Reference Issue (For employees only. Ignore if you are an outside contributor)

• Closes https://go/j/[ticket-number]

[Copilot]

Pull request overview

This PR updates GitHub Actions workflows to align with the runner ecosystem’s move toward newer Node.js runtimes by standardizing workflows on Node 24 and refreshing action dependencies (including pinning some third-party actions to commit SHAs).

Changes:

• Bump Node.js versions used in workflows to 24.x (and update actions/setup-node where needed).
• Update several GitHub Actions dependencies (e.g., actions/github-script and crazy-max/ghaction-import-gpg).
• Pin select third-party actions to commit SHAs for improved supply-chain security (e.g., Firefox setup and HTTP request action).

Reviewed changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
.github/workflows/web-run-test.yml	Updates setup-node to v4 + Node 24; pins Firefox setup action to a SHA.
.github/workflows/web-kit-pull-request.yml	Updates Node version to 24.x for the web kit PR workflow.
.github/workflows/issue-status-update-from-jira.yml	Pins http-request-action and find/replace action to SHAs; leaves Jira login on @master.
.github/workflows/issue-comment-from-jira.yml	Pins http-request-action and find/replace action to SHAs; leaves Jira login on @master.
.github/workflows/dependabot-rebase-development.yml	Pins ghaction-import-gpg to a v7 commit SHA.
.github/workflows/dependabot-automerge.yml	Bumps actions/github-script from v6 to v7.
.github/workflows/data-plan-fetch.yml	Updates setup-node to v4 + Node 24.
.github/workflows/android-kit-release.yml	Pins ghaction-import-gpg to a v7 commit SHA.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

[rmi22186]

besides the setuff that Copilot flagged. lgtm