fix(deps): update github-actions

.github/workflows/codeql.yml

@@ -76,7 +76,7 @@ jobs:
 
             # Initializes the CodeQL tools for scanning.
             - name: "Initialize CodeQL"
-              uses: "github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd" # v4.37.7
+              uses: "github/codeql-action/init@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28" # v4.37.8
               with:
                   languages: "${{ matrix.language }}"
                   # If you wish to specify custom queries, you can do so here or in a config file.
@@ -86,7 +86,7 @@ jobs:
             # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
             # If this step fails, then you should remove it and run the build manually (see below)
             - name: "Autobuild"
-              uses: "github/codeql-action/autobuild@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd" # v4.37.7
+              uses: "github/codeql-action/autobuild@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28" # v4.37.8
 
             # ℹ️ Command-line programs to run using the OS shell.
             # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -99,6 +99,6 @@ jobs:
             #   ./location_of_script_within_repo/buildscript.sh
 
             - name: "Perform CodeQL Analysis"
-              uses: "github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd" # v4.37.7
+              uses: "github/codeql-action/analyze@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28" # v4.37.8
               with:
                   category: "/language:${{matrix.language}}"

.github/workflows/lint.yml

@@ -149,7 +149,7 @@ jobs:
 
             - name: "Setup resources and environment"
               id: "setup"
-              uses: "anolilab/workflows/step/node@f792b69a3ca60ddd99a10c98cfc86dc673a59dd3" # main
+              uses: "anolilab/workflows/step/node@058097dfea9d402f2a015c820742690466df16a0" # main
               with:
                   node-version: "${{ inputs.node_version || '22' }}"
                   install-node-gyp: "true"
@@ -203,7 +203,7 @@ jobs:
 
             - name: "Setup resources and environment"
               id: "setup"
-              uses: "anolilab/workflows/step/node@f792b69a3ca60ddd99a10c98cfc86dc673a59dd3" # main
+              uses: "anolilab/workflows/step/node@058097dfea9d402f2a015c820742690466df16a0" # main
               with:
                   node-version: "${{ inputs.node_version || '22' }}"
                   install-node-gyp: "true"

.github/workflows/pnpm-lock-file-maintenance.yml

@@ -57,7 +57,7 @@ jobs:
 
             - name: "Setup resources and environment"
               id: "setup"
-              uses: "anolilab/workflows/step/setup@f792b69a3ca60ddd99a10c98cfc86dc673a59dd3" # main
+              uses: "anolilab/workflows/step/setup@058097dfea9d402f2a015c820742690466df16a0" # main
               with:
                   node-version: "${{ inputs.node-version }}"
                   cache-prefix: "lock-file-update"

.github/workflows/scorecards.yml

@@ -77,6 +77,6 @@ jobs:
 
             # Upload the results to GitHub's code scanning dashboard.
             - name: "Upload to code-scanning"
-              uses: "github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd" # v4.37.7
+              uses: "github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28" # v4.37.8
               with:
                   sarif_file: "results.sarif"

.github/workflows/test.yml

@@ -135,7 +135,7 @@ jobs:
             # `strategy.job-index == 0` is the lowest combination (lowest node x lowest os).
             - name: "Upload coverage to Codecov"
               if: "inputs.coverage == true && strategy.job-index == 0"
-              uses: "anolilab/workflows/step/codecov@f792b69a3ca60ddd99a10c98cfc86dc673a59dd3" # main
+              uses: "anolilab/workflows/step/codecov@058097dfea9d402f2a015c820742690466df16a0" # main
               with:
                   codecov-token: "${{ secrets.codecov_token }}"
 

.github/workflows/zizmor.yml

@@ -47,7 +47,7 @@ jobs:
                   persist-credentials: false
 
             - name: "Install zizmor"
-              uses: "taiki-e/install-action@82cd3e7658a6f96c86c0234aeeda1748937cb0a1" # v2.85.13
+              uses: "taiki-e/install-action@6cd13508893c0e7eab5f273c2575d3859bd7229a" # v2.86.6
               with:
                   tool: "zizmor"
 
@@ -61,7 +61,7 @@ jobs:
 
             - name: "Upload SARIF file"
               if: "always()"
-              uses: "github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd" # v4.37.7
+              uses: "github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28" # v4.37.8
               with:
                   sarif_file: "results.sarif"
                   category: "zizmor"

step/rust/action.yml

@@ -116,7 +116,7 @@ runs:
               cache-directories: "${{ inputs.cache-directories }}"
 
         - name: "Install tools"
-          uses: "taiki-e/install-action@82cd3e7658a6f96c86c0234aeeda1748937cb0a1" # v2.85.13
+          uses: "taiki-e/install-action@6cd13508893c0e7eab5f273c2575d3859bd7229a" # v2.86.6
           if: "inputs.tools != ''"
           with:
               tool: "${{ inputs.tools }}"