chore(deps): bump the actions group with 2 updates (#1917)

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/check.yml

@@ -28,7 +28,7 @@ jobs:
           node-version: 26
           package-manager-cache: false
       - name: Setup pnpm
-        uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
       - name: Check formatting

.github/workflows/publish.yml

@@ -30,7 +30,7 @@ jobs:
           node-version: 26
           package-manager-cache: false
       - name: Setup pnpm
-        uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - name: Install dependencies
         run: pnpm install --frozen-lockfile --ignore-scripts
       - name: Build packages

.github/workflows/release.yml

@@ -25,7 +25,7 @@ jobs:
           package-manager-cache: false
 
       - name: Setup pnpm
-        uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
 
       - name: Install dependencies
         run: pnpm install --frozen-lockfile --ignore-scripts

.github/workflows/test.yml

@@ -28,7 +28,7 @@ jobs:
           node-version: 26
           package-manager-cache: false
       - name: Setup pnpm
-        uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
       - name: Build packages
@@ -41,7 +41,7 @@ jobs:
           node-version: 24
           package-manager-cache: false
       - name: Setup pnpm
-        uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - name: Test on node@24
         run: node --run test
       - name: Setup node@22
@@ -50,6 +50,6 @@ jobs:
           node-version: 22
           package-manager-cache: false
       - name: Setup pnpm
-        uses: pnpm/action-setup@8912a9102ac27614460f54aedde9e1e7f9aec20d # v6.0.5
+        uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9
       - name: Test on node@22
         run: node --run test

.github/workflows/zizmor.yml

@@ -23,7 +23,7 @@ jobs:
           persist-credentials: false
 
       - name: Install the latest version of uv
-        uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0
+        uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2
 
       - name: Run zizmor 🌈
         run: uvx zizmor --format=github .