ci(deps): bump the actions-patches group with 4 updates

.github/workflows/codeql.yml

@@ -20,13 +20,13 @@ jobs:
       actions: read
       contents: read
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.36.1
+        uses: github/codeql-action/init@v4.36.2
         with:
           languages: rust
           build-mode: none
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@v4.36.1
+        uses: github/codeql-action/analyze@v4.36.2
         with:
           category: "/language:rust"

.github/workflows/dast.yml

@@ -25,7 +25,7 @@ jobs:
     name: ZAP baseline scan
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
       - uses: actions/setup-node@v6
         with:
           node-version: lts/*

.github/workflows/frontend.yml

@@ -14,7 +14,7 @@ jobs:
     name: Typecheck & build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
       - uses: actions/setup-node@v6
         with:
           node-version: lts/*
@@ -31,7 +31,7 @@ jobs:
     name: Vitest
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
       - uses: actions/setup-node@v6
         with:
           node-version: lts/*
@@ -50,7 +50,7 @@ jobs:
     # side: defaults set the working directory to crates/web/frontend, so
     # cargo steps override it explicitly.
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
       - uses: actions/setup-node@v6
         with:
           node-version: lts/*
@@ -80,7 +80,7 @@ jobs:
         run: cargo build -p seedling -p seedling-web -p seedling-ctl --locked
         working-directory: ${{ github.workspace }}
       - name: Cache Playwright browsers
-        uses: actions/cache@v5
+        uses: actions/cache@v5.0.5
         with:
           path: ~/.cache/ms-playwright
           key: ${{ runner.os }}-playwright-${{ hashFiles('crates/web/frontend/package-lock.json') }}

.github/workflows/fuzz.yml

@@ -15,12 +15,12 @@ jobs:
     name: Fuzz wire decoders
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
       - name: Configure toolchain
         run: |
           rustup toolchain install --profile minimal --no-self-update nightly
           rustup default nightly
-      - uses: taiki-e/install-action@v2.81.2
+      - uses: taiki-e/install-action@v2.81.8
         with:
           tool: cargo-fuzz
       - uses: Swatinem/rust-cache@v2

.github/workflows/rust.yml

@@ -14,7 +14,7 @@ jobs:
     name: Lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
       - name: Configure toolchain
         run: |
           rustup toolchain install --profile minimal --no-self-update stable
@@ -34,7 +34,7 @@ jobs:
     name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
       - name: Configure toolchain
         run: |
           rustup toolchain install --profile minimal --no-self-update stable

.github/workflows/tests.yml

@@ -14,7 +14,7 @@ jobs:
     name: cargo test
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
       - name: Configure toolchain
         run: |
           rustup toolchain install --profile minimal --no-self-update stable

.github/workflows/tracey.yml

@@ -9,7 +9,7 @@ jobs:
   tracey:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6.0.2
+      - uses: actions/checkout@v6.0.3
 
       - name: Install tracey
         run: curl --proto '=https' --tlsv1.2 -LsSf https://github.com/bearcove/tracey/releases/download/v1.3.0/tracey-installer.sh | sh