⬆️ (deps): Bump the github-actions group with 4 updates

Bumps the github-actions group with 4 updates: [actions/setup-node](https://github.com/actions/setup-node), [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog), [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) and [actions/github-script](https://github.com/actions/github-script).


Updates `actions/setup-node` from 6 to 7
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v6...v7)

Updates `trufflesecurity/trufflehog` from 3.95.7 to 3.95.9
- [Release notes](https://github.com/trufflesecurity/trufflehog/releases)
- [Commits](https://github.com/trufflesecurity/trufflehog/compare/v3.95.7...v3.95.9)

Updates `zizmorcore/zizmor-action` from 0.5.7 to 0.6.0
- [Release notes](https://github.com/zizmorcore/zizmor-action/releases)
- [Commits](https://github.com/zizmorcore/zizmor-action/compare/v0.5.7...v0.6.0)

Updates `actions/github-script` from 8 to 9
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v8...v9)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: trufflesecurity/trufflehog
  dependency-version: 3.95.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: zizmorcore/zizmor-action
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/workflows/ci.yml

@@ -60,7 +60,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '20'
           cache: 'yarn'
@@ -81,7 +81,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '20'
           cache: 'yarn'
@@ -100,7 +100,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '20'
           cache: 'yarn'
@@ -121,7 +121,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '20'
 
@@ -150,7 +150,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Setup Node.js
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '20'
           cache: 'yarn'
@@ -213,7 +213,7 @@ jobs:
           fetch-depth: 0
 
       - name: Scan PR Diff for Secrets
-        uses: trufflesecurity/trufflehog@v3.95.7
+        uses: trufflesecurity/trufflehog@v3.95.9
         with:
           base: ${{ github.event.pull_request.base.sha }}
           head: ${{ github.event.pull_request.head.sha }}
@@ -234,7 +234,7 @@ jobs:
           fail-on-error: true
 
       - name: Run Zizmor
-        uses: zizmorcore/zizmor-action@v0.5.7
+        uses: zizmorcore/zizmor-action@v0.6.0
         with:
           inputs: .github/workflows/
           advanced-security: false

.github/workflows/close-stale-issues.yml

@@ -18,7 +18,7 @@ jobs:
     steps:
 
       - name: Exempt actively discussed or reopened issues 💬
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           github-token: ${{ secrets.BOT_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |

.github/workflows/release.yml

@@ -42,7 +42,7 @@ jobs:
           fetch-depth: 0
 
       - name: 🔧 Setup Node.js
-        uses: actions/setup-node@v6 # zizmor: ignore[cache-poisoning]
+        uses: actions/setup-node@v7 # zizmor: ignore[cache-poisoning]
         with:
           node-version: '20'
 

.github/workflows/tag.yml

@@ -70,7 +70,7 @@ jobs:
       - name: 📂 Check PR for code changes and version bump
         id: check_pr
         if: env.IS_MANUAL != 'true'
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const { owner, repo } = context.repo;
@@ -135,7 +135,7 @@ jobs:
       - name: 🔍 Extract referenced issues
         id: issues
         if: env.IS_MANUAL != 'true' && steps.check_pr.outputs.needs_tag == 'true'
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const author = context.payload.pull_request.user?.login || '';
@@ -234,7 +234,7 @@ jobs:
           && steps.check_pr.outputs.needs_tag == 'true'
           && steps.issues.outputs.numbers != ''
         continue-on-error: true
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         env:
           ISSUES: ${{ steps.issues.outputs.numbers }}
         with:

.github/workflows/update-docs-site.yml

@@ -47,7 +47,7 @@ jobs:
           python-version: '3.x'
 
       - name: Setup Node.js 🟢
-        uses: actions/setup-node@v6
+        uses: actions/setup-node@v7
         with:
           node-version: '22'