chore(deps): bump the github-actions group across 1 directory with 6 updates

.github/workflows/branch-check.yml

@@ -32,7 +32,7 @@ jobs:
       - name: Install pinned npm
         run: npm install --global npm@11.20.0
       - name: Install pinned cargo-deny
-        uses: taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2 # v2
+        uses: taiki-e/install-action@cfdb7ed4ccc7c7dce37759eae89dc5674b469b39 # v2
         with:
           tool: cargo-deny@0.20.2
       - run: python -m pip install -r tools/requirements-ci.txt

.github/workflows/ci.yml

@@ -382,7 +382,7 @@ jobs:
       - name: Install pinned workspace CLI dependencies
         run: python -m pip install click==8.4.1 pydantic==2.14.3
       - name: Set up pinned Docker
-        uses: docker/setup-docker-action@7ec28a010822b4626af4874f9448a4b05ac6f3e5 # v5.6.0
+        uses: docker/setup-docker-action@3f1ab1ab0e29231562e4db4ca600c1a49653bac6 # v5.7.0
         with:
           version: v29.6.1
           daemon-config: '{"features":{"containerd-snapshotter":true}}'
@@ -591,7 +591,7 @@ jobs:
           python-version: "3.15.2"
 
       - name: Install pinned cargo-deny
-        uses: taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2 # v2
+        uses: taiki-e/install-action@cfdb7ed4ccc7c7dce37759eae89dc5674b469b39 # v2
         with:
           tool: cargo-deny@0.20.2
 

.github/workflows/codeql.yml

@@ -39,14 +39,14 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4
+        uses: github/codeql-action/init@33d7b85da1a04171e211befe2c739303b9a4c066 # v4
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
           queries: security-extended
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4
+        uses: github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4
         with:
           category: /language:${{ matrix.language }}
 

.github/workflows/optional-platforms.yml

@@ -277,7 +277,7 @@ jobs:
       - name: Install pinned workspace CLI dependencies
         run: python -m pip install click==8.4.1 pydantic==2.14.3
       - name: Set up pinned Docker
-        uses: docker/setup-docker-action@7ec28a010822b4626af4874f9448a4b05ac6f3e5 # v5.6.0
+        uses: docker/setup-docker-action@3f1ab1ab0e29231562e4db4ca600c1a49653bac6 # v5.7.0
         with:
           version: v29.6.1
           daemon-config: '{"features":{"containerd-snapshotter":true}}'

.github/workflows/release.yml

@@ -476,7 +476,7 @@ jobs:
       - name: Install pinned npm
         run: npm install --global npm@11.20.0
       - name: Set up pinned native Docker
-        uses: docker/setup-docker-action@7ec28a010822b4626af4874f9448a4b05ac6f3e5 # v5.6.0
+        uses: docker/setup-docker-action@3f1ab1ab0e29231562e4db4ca600c1a49653bac6 # v5.7.0
         with:
           version: v29.6.1
       - name: Prepare inherited host Cargo target for the source-cache fence
@@ -584,7 +584,7 @@ jobs:
       - name: Install pinned npm
         run: npm install --global npm@11.20.0
       - name: Set up pinned Docker
-        uses: docker/setup-docker-action@7ec28a010822b4626af4874f9448a4b05ac6f3e5 # v5.6.0
+        uses: docker/setup-docker-action@3f1ab1ab0e29231562e4db4ca600c1a49653bac6 # v5.7.0
         with:
           version: v29.6.1
           daemon-config: '{"features":{"containerd-snapshotter":true}}'
@@ -668,7 +668,7 @@ jobs:
       - name: Install pinned workspace CLI dependencies
         run: python -m pip install click==8.4.1 pydantic==2.14.3
       - name: Set up pinned Docker with multi-platform image store
-        uses: docker/setup-docker-action@7ec28a010822b4626af4874f9448a4b05ac6f3e5 # v5.6.0
+        uses: docker/setup-docker-action@3f1ab1ab0e29231562e4db4ca600c1a49653bac6 # v5.7.0
         with:
           version: v29.6.1
           daemon-config: |
@@ -685,7 +685,7 @@ jobs:
           driver: docker
           use: false
       - name: Authenticate upstream GHCR base pulls
-        uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+        uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -781,7 +781,7 @@ jobs:
       - name: Install pinned workspace CLI dependencies
         run: python -m pip install click==8.4.1 pydantic==2.14.3
       - name: Set up pinned native Docker with multi-platform image store
-        uses: docker/setup-docker-action@7ec28a010822b4626af4874f9448a4b05ac6f3e5 # v5.6.0
+        uses: docker/setup-docker-action@3f1ab1ab0e29231562e4db4ca600c1a49653bac6 # v5.7.0
         with:
           version: v29.6.1
           daemon-config: |
@@ -1030,7 +1030,7 @@ jobs:
         with:
           release: v0.11.6
       - name: Authenticate publication to GHCR
-        uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+        uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -1118,7 +1118,7 @@ jobs:
           subject-path: ${{ runner.temp }}/emulebb-rust-out/release/rust-v${{ env.RELEASE_VERSION }}/*
       - name: Upload immutable assets to a draft prerelease
         id: draft-release
-        uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3
+        uses: softprops/action-gh-release@8a0cd651e5b2365bd640854a3fa5dfc70e4875f3 # v3.0.4
         with:
           tag_name: rust-v${{ env.RELEASE_VERSION }}
           target_commitish: ${{ needs.prepare.outputs.source_sha }}
@@ -1171,7 +1171,7 @@ jobs:
         with:
           release: v0.11.6
       - name: Authenticate nightly channel publication
-        uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
+        uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}