build(deps): bump the actions-all group with 7 updates

.github/workflows/ci.yml

@@ -89,7 +89,7 @@ jobs:
       # than skipping it, which is deliberate: a supply-chain check that is
       # silently absent on a machine where it is not installed is a check that
       # reports nothing about the code.
-      - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2
+      - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2
         with:
           tool: |
             cargo-make@0.37.24
@@ -141,7 +141,7 @@ jobs:
       # Without this a failure is a red dot and a scrollback. The path is set in
       # `.config/nextest.toml` as `junit.path`, so the file lands under a
       # per-profile store directory next to the build output.
-      - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v4
         if: always()
         with:
           name: nextest-junit
@@ -176,11 +176,11 @@ jobs:
       # `rust-toolchain.toml` before any action runs, so the env var is what
       # wins, and setting only the action's `toolchain:` input is not enough on
       # its own.
-      - uses: dtolnay/rust-toolchain@02cb101ec7c40f2c49e1d9714d64511d8e1b74de # master
+      - uses: dtolnay/rust-toolchain@683b588c487a69d01f6c6ddf40f036ff682cc2c8 # master
         with: { toolchain: 1.97.1 }
         env:
           RUSTUP_TOOLCHAIN: 1.97.1
-      - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2
+      - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2
         with:
           tool: |
             cargo-nextest@0.9.146
@@ -220,15 +220,15 @@ jobs:
       # `dioxus-cli` is the crate; `dx` is the binary it installs and is not on
       # crates.io, so `dx@0.7.10` does not resolve. The version is the resolved
       # `dioxus` in `Cargo.lock`, which is the one `dx` has to agree with.
-      - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2
+      - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2
         with:
           tool: |
             cargo-make@0.37.24
             dioxus-cli@0.7.10
       - run: ./mk web-build-all
       - name: Report the optimized size of each app
         run: ./mk web-size
-      - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v4
         with:
           name: wasm-bundles
           # `dx` writes into the one workspace target directory, not under each

.github/workflows/codeql.yml

@@ -35,10 +35,10 @@ jobs:
           persist-credentials: false
           fetch-depth: 1
 
-      - uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd
+      - uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d
         with:
           languages: ${{ matrix.language }}
 
-      - uses: github/codeql-action/autobuild@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd
+      - uses: github/codeql-action/autobuild@24c54180a607b1449ed407dd24f251e4e9147c8d
 
-      - uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd
+      - uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d

.github/workflows/deploy.yml

@@ -97,7 +97,7 @@ jobs:
           # compiling the dependency graph and the rest reuse it.
           shared-key: pages
 
-      - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2
+      - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2
         with:
           tool: |
             cargo-make@0.37.24
@@ -111,7 +111,7 @@ jobs:
 
       # `dx` writes into the one workspace target directory, not under the app's
       # own directory.
-      - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v4
         with:
           name: app-${{ matrix.app }}
           path: target/dx/${{ matrix.pkg }}/release/web/public
@@ -133,7 +133,7 @@ jobs:
       # with "unable to find version b4b15b8c..." because this line carried
       # upload-artifact's SHA. `./mk action-pins` checks every pin against the
       # repository that owns it, on the weekly schedule.
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
+      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: _site
 

.github/workflows/scheduled.yml

@@ -66,14 +66,14 @@ jobs:
         run: rustup show active-toolchain
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.8
         with: { shared-key: ci }
-      - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2
+      - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2
         with:
           tool: |
             cargo-make@0.37.24
             cargo-nextest@0.9.146
             cargo-mutants@27.1.0
       - run: ./mk mutants
-      - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v4
         if: always()
         with:
           name: mutants-report
@@ -110,14 +110,14 @@ jobs:
         run: rustup show active-toolchain
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.8
         with: { shared-key: ci }
-      - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2
+      - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2
         with:
           tool: |
             cargo-make@0.37.24
             cargo-nextest@0.9.146
             cargo-llvm-cov@0.9.1
       - run: ./mk cov
-      - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4
+      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v4
         with:
           name: coverage-report
           path: target/llvm-cov-report/
@@ -150,7 +150,7 @@ jobs:
         run: rustup show active-toolchain
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.8
         with: { shared-key: ci }
-      - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2
+      - uses: taiki-e/install-action@1168f6810a3cb30a3514bf5756a3b7f0422c6df8 # v2
         with:
           tool: |
             cargo-make@0.37.24