chore(deps): bump actions/setup-node from 5 to 6 (#728)

* chore(deps): bump actions/setup-node from 5 to 6

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5 to 6.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>

* ci(release): protect against cache poisoning

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Frazer Smith <[email protected]>

Author: dependabot[bot]

.github/workflows/ci.yml

@@ -17,7 +17,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           persist-credentials: false
-      - uses: actions/setup-node@v5
+      - uses: actions/setup-node@v6
         with:
           check-latest: true
           node-version-file: '.nvmrc'

.github/workflows/release.yml

@@ -27,10 +27,11 @@ jobs:
       pull-requests: write
     steps:
       - name: Setting action build runtime
-        uses: actions/setup-node@v5
+        uses: actions/setup-node@v6
         with:
           check-latest: true
           node-version: 20
+          package-manager-cache: false
       - uses: nearform-actions/optic-release-automation-action@9e3518763346efacba15d729d0faaa4cbd8fdd52 # v4.12.3
         with:
           github-token: ${{ github.token }}