chore(deps): update cross-platform-actions/action action to v1 - #3220

@claude[agent] do we have any security concern if upgrade this action?

@claude[agent] do we have any security concern if upgrade this action?

Based on my investigation, I don't see any security concerns with upgrading to v1.0.0:

Security posture:

• The repository has a security policy and actively addresses security issues
• A code injection vulnerability (GHSA-928q-63gf-mc2x) was fixed in v0.30.0 (Nov 2025) - this affected the action's own release workflow, not users of the action
• No open security advisories or alerts
• Repository is actively maintained with recent commits

v1.0.0 changes:

• Breaking: Requires Node.js 24 (we're already using it on line 697)
• Breaking: Only supports Linux runners like ubuntu-latest (we're using this on line 682)
• Breaking: Removes Xhyve hypervisor support, QEMU only (we weren't using Xhyve)
• Fixes file ownership issues on Haiku after rsync
• Releases are now immutable (security improvement)

Impact on napi-rs:
The workflow at .github/workflows/test-release.yaml:729 runs on ubuntu-latest with FreeBSD 15.0 in a VM, which is fully compatible with v1.0.0. No security concerns identified.