sdk%chore(ci): bump the actions group across 3 directories with 5 updates

.github/actions/bazel_remote/action.yml

@@ -37,7 +37,7 @@ runs:
     # GitHub's cache scopes entries to their branch, so untrusted runs may save.
     - name: Manage Bazel downloads
       if: inputs.url == '' || inputs.auth == ''
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: |
           .cache/bazel/cache/repos

.github/actions/gha_cache/action.yml

@@ -72,15 +72,15 @@ runs:
 
     - name: Restore and save on GitHub
       if: (inputs.url == '' || inputs.bucket == '' || inputs.auth == '') && inputs.restore-only != 'true'
-      uses: actions/cache@v5
+      uses: actions/cache@v6
       with:
         path: ${{ inputs.path }}
         key: ${{ inputs.key }}
         restore-keys: ${{ inputs.restore-keys }}
 
     - name: Restore from GitHub
       if: (inputs.url == '' || inputs.bucket == '' || inputs.auth == '') && inputs.restore-only == 'true'
-      uses: actions/cache/restore@v5
+      uses: actions/cache/restore@v6
       with:
         path: ${{ inputs.path }}
         key: ${{ inputs.key }}

.github/workflows/build_bazel.yml

@@ -24,7 +24,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
           filter: blob:none
@@ -58,7 +58,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 

.github/workflows/build_cross.yml

@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 
@@ -36,7 +36,7 @@ jobs:
           large-packages: false
 
       - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@v22
+        uses: DeterminateSystems/nix-installer-action@v23
 
       - name: Cache Nix
         id: niks3
@@ -91,7 +91,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 
@@ -105,7 +105,7 @@ jobs:
           large-packages: false
 
       - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@v22
+        uses: DeterminateSystems/nix-installer-action@v23
 
       - name: Cache Nix
         uses: Mic92/niks3-action@v1

.github/workflows/build_msrv.yml

@@ -37,7 +37,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
           filter: blob:none
@@ -72,7 +72,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
           submodules: ${{ inputs.fuzz_package_dir != '' }}
@@ -98,7 +98,7 @@ jobs:
           large-packages: false
 
       - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@v22
+        uses: DeterminateSystems/nix-installer-action@v23
 
       - name: Cache Nix
         uses: Mic92/niks3-action@v1
@@ -162,15 +162,15 @@ jobs:
 
       - name: Upload coverage to Codecov
         if: env.HAS_CODECOV == 'true'
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v7
         with:
           files: lcov.info
           flags: ${{ inputs.package }}
           token: ${{ secrets.CODECOV_TOKEN }}
 
       - name: Upload test results to Codecov
         if: ${{ !cancelled() && env.HAS_CODECOV == 'true' && hashFiles('target/nextest/default/junit.xml') != '' }}
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@v7
         with:
           files: target/nextest/default/junit.xml
           report_type: test_results

.github/workflows/build_stable.yml

@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 100
 
@@ -51,7 +51,7 @@ jobs:
           large-packages: false
 
       - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@v22
+        uses: DeterminateSystems/nix-installer-action@v23
 
       - name: Cache Nix
         id: niks3
@@ -158,7 +158,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
 

.github/workflows/pages.yml

@@ -37,7 +37,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
           persist-credentials: false
@@ -52,7 +52,7 @@ jobs:
           large-packages: false
 
       - name: Install Nix
-        uses: DeterminateSystems/nix-installer-action@v22
+        uses: DeterminateSystems/nix-installer-action@v23
 
       - name: Cache Nix
         uses: Mic92/niks3-action@v1

.github/workflows/pr_comment.yml

@@ -20,15 +20,15 @@ jobs:
     runs-on: ubuntu-slim
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Read environment
         run: cat .github/ci.env >> "$GITHUB_ENV"
 
       - name: Update PR comments
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const script = require("./.github/scripts/pr_comment.js");

.github/workflows/pr_tag.yml

@@ -24,7 +24,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
@@ -34,14 +34,14 @@ jobs:
           git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
 
       - name: Tag conflicting, outdated and stale PRs
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const { tag } = require("./.github/scripts/pr_tag.js");
             await tag({ github, context });
 
       - name: Sync labels with the project board
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         env:
           PROJECT_TOKEN: ${{ secrets.PROJECT_TOKEN }}
         with:
@@ -60,13 +60,13 @@ jobs:
       pull-requests: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 1
           persist-credentials: false
 
       - name: Cancel unfinished runs
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const { halt } = require("./.github/scripts/pr_tag.js");