Update all third-party GitHub Actions

.github/workflows/build.yml

@@ -47,12 +47,12 @@ jobs:
           source $HOME/.cargo/env
           ./gradlew :analyzer:compileRustDarwin :analyzer:compileRustDarwinX86 --info --stacktrace
       - name: Upload Darwin ARM64 artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: analyzer-aarch64-apple-darwin
           path: analyzer/target/aarch64-apple-darwin/release/analyzer.xz
       - name: Upload Darwin x86_64 artifact
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: analyzer-x86_64-apple-darwin
           path: analyzer/target/x86_64-apple-darwin/release/analyzer.xz
@@ -76,7 +76,7 @@ jobs:
           sudo apt-get clean
       - name: Cache cross-compiler
         id: cache-cross-compiler
-        uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
+        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: cross-compiler-output
           key: musl-cross-compiler-aarch64-${{ env.MUSL_CROSS_MAKE_COMMIT }}
@@ -116,17 +116,17 @@ jobs:
         run: |
           ./gradlew :analyzer:compileRustLinuxMusl :analyzer:compileRustLinuxArm :analyzer:compileRustWin --info --stacktrace
       - name: Upload Linux x86_64 analyzer
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: analyzer-x86_64-unknown-linux-musl
           path: analyzer/target/x86_64-unknown-linux-musl/release/analyzer.xz
       - name: Upload Linux ARM64 analyzer
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: analyzer-aarch64-unknown-linux-musl
           path: analyzer/target/aarch64-unknown-linux-musl/release/analyzer.xz
       - name: Upload Windows analyzer
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: analyzer-x86_64-pc-windows-gnu
           path: analyzer/target/x86_64-pc-windows-gnu/release/analyzer.exe.xz
@@ -279,7 +279,7 @@ jobs:
           ./gradlew :e2e:test -Pe2e -DpluginVersion=${PROJECT_VERSION} --info --stacktrace
       - name: Upload test reports
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: e2e-test-reports-windows
           path: e2e/build/reports/tests/**
@@ -317,7 +317,7 @@ jobs:
             ./gradlew :e2e:test -Pe2e -DpluginVersion=${PROJECT_VERSION} --info --stacktrace
       - name: Upload test reports
         if: always()
-        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: e2e-test-reports-linux-arm64
           path: e2e/build/reports/tests/**

.github/workflows/bump-version.yml

@@ -54,7 +54,7 @@ jobs:
         run: cargo generate-lockfile --manifest-path analyzer/Cargo.toml
       - name: Restore tracked mise.toml
         run: git restore --source=HEAD --staged --worktree mise.toml
-      - uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+      - uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
           author: ${{ github.actor }} <${{ github.actor }}@users.noreply.github.com>
           commit-message: Prepare next development iteration

.github/workflows/mark-prs-stale.yml

@@ -11,7 +11,7 @@ jobs:
       issues: write
       pull-requests: write
     steps:
-      - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10
+      - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10
         with:
           stale-pr-message: 'This PR is stale because it has been open 7 days with no activity. If there is no activity in the next 7 days it will be closed automatically'
           stale-pr-label: 'stale'

.github/workflows/update-clippy-metadata.yml

@@ -118,7 +118,7 @@ jobs:
 
       - name: Create or update draft PR
         if: steps.release_check.outputs.needs_update == 'true' && steps.git_diff.outputs.has_changes == 'true' && inputs.dry_run != true
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
           commit-message: Update Clippy metadata for Rust ${{ steps.release_check.outputs.release_tag }}
           title: Update Clippy metadata for Rust ${{ steps.release_check.outputs.release_tag }}