add missing ref, update to v4 (#224)

Small issue in ui-unit-test job is causing failures across all PRs since
we use pull_request_target instead of pull_request for the trigger in
development.yml which means that actions run against the workflow in
main instead of the workflow files that might have been updated in the
PR.

The last UI PR was merged and brought in this buggy ui-unit-test job.

I also updated the checkout action to v4 since the other non ui jobs are
using v4 instead of v3

Ended up updating package-lock as well since I was getting more failures
than expected, thought maybe that was the issue. Regardless, this PR
passes the checks when I temporarily update the trigger from
pull_request_target to pull_request

Author: DaltheCow