Fix Homebrew formula bump

[turbolent]

Description

The Publish Release workflow failed for v2.18.0: https://github.com/onflow/flow-cli/actions/runs/32891906132

Error: unexpected HTTP 303 response

mislav/bump-homebrew-formula-action@v3 only accepts HTTP 301/302 when it resolves the release tarball URL. GitHub now answers that request with 303.

v4.2 of the action accepts any 3xx redirect (mislav/bump-homebrew-formula-action#342).
v4 also moves the action to Node 24, which clears the Node 20 deprecation warning in the same job.

---

For contributor use:

• Targeted PR against master branch
• Linked to Github issue with discussion and accepted design OR link to spec that describes this work
• Code follows the standards mentioned here
• Updated relevant documentation
• Re-reviewed Files changed in the Github PR explorer
• Added appropriate labels

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 1 package(s) with unknown licenses.

See the Details below.

License Issues

.github/workflows/publish-release.yml

Package	Version	License	Issue Type
mislav/bump-homebrew-formula-action	4.*.*	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
actions/mislav/bump-homebrew-formula-action	4.*.*	🟢 5	Details Check Score Reason Maintained 🟢 10 29 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Code-Review 🟢 10 all changesets reviewed Packaging ⚠️ -1 packaging workflow not detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 3 dependency not pinned by hash detected -- score normalized to 3 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy ⚠️ 0 security policy file not detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Branch-Protection ⚠️ 0 branch protection not enabled on development/release branches

Scanned Files

• .github/workflows/publish-release.yml

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!