ci: bump the actions group across 2 directories with 5 updates

.github/actions/setup/action.yml

@@ -39,7 +39,7 @@ runs:
 
     - name: Setup Node
       if: inputs.node-version != ''
-      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6
+      uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6
       with:
         node-version: ${{ inputs.node-version }}
         registry-url: ${{ inputs.registry-url }}

.github/workflows/checks.yml

@@ -162,7 +162,7 @@ jobs:
 
       - name: Upload integration test reports
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: integration-reports-${{ matrix.provision }}-${{ matrix.shard }}
           path: |
@@ -249,7 +249,7 @@ jobs:
 
       - name: Upload end-to-end reports and server logs
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: http-e2e-${{ matrix.group }}
           path: ${{ runner.temp }}/e2e/
@@ -306,7 +306,7 @@ jobs:
         run: bun run db:migrate
 
       - name: Download the production build
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: next-build
           path: ${{ runner.temp }}
@@ -329,7 +329,7 @@ jobs:
 
       - name: Upload end-to-end reports and server logs
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: http-e2e-mobile-${{ matrix.browser }}
           path: ${{ runner.temp }}/e2e/
@@ -523,7 +523,7 @@ jobs:
 
       - name: Upload Electron E2E results and server logs
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: desktop-live-e2e-results-${{ matrix.tests }}
           path: ${{ runner.temp }}/e2e/
@@ -716,7 +716,7 @@ jobs:
 
       - name: Upload compiler output and counts
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: test-types
           path: ${{ runner.temp }}/test-types/
@@ -762,7 +762,7 @@ jobs:
 
       - name: Upload shell placeholder execution report
         if: failure() && matrix.shard == 1
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: shell-placeholders
           path: ${{ runner.temp }}/shell-placeholders.json
@@ -914,7 +914,7 @@ jobs:
       # this job replace the earlier attempt's build; three days covers re-running a failed shard
       # after a weekend.
       - name: Upload the build for e2e-mobile
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: next-build
           path: ${{ runner.temp }}/next-build.tar.zst

.github/workflows/desktop-e2e.yml

@@ -109,7 +109,7 @@ jobs:
 
       - name: Upload test results
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: desktop-e2e-results-pinned
           path: apps/desktop/test-results
@@ -172,7 +172,7 @@ jobs:
 
       - name: Upload test results
         if: failure()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: desktop-e2e-results-latest
           path: apps/desktop/test-results
@@ -195,7 +195,7 @@ jobs:
           bun-version: 1.4.2
 
       - name: Setup Node
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6
         with:
           node-version: 22
 

.github/workflows/desktop-release.yml

@@ -146,7 +146,7 @@ jobs:
           bun-version: 1.4.2
 
       - name: Setup Node
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6
         with:
           node-version: 22
 
@@ -470,7 +470,7 @@ jobs:
 
       - name: Upload artifacts to the workflow run
         if: ${{ !inputs.publish }}
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: sim-desktop-${{ inputs.version }}
           path: |

.github/workflows/helm.yml

@@ -57,7 +57,7 @@ jobs:
           version: v3.16.4
 
       - name: Set up chart-testing
-        uses: helm/chart-testing-action@6ec842c01de15ebb84c8627d2744a0c2f2755c9f # v2.8.0
+        uses: helm/chart-testing-action@720270857a28afd41e2426521a7801db09e9b510 # v2.9.0
 
       - name: Setup Bun
         uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
@@ -176,7 +176,7 @@ jobs:
           version: v3.16.4
 
       - name: Create kind cluster
-        uses: helm/kind-action@06c1ae10762d3b9c1644e7fe69596ae519e015a2 # v1.15.0
+        uses: helm/kind-action@1544676c07bb3570fcb70166beaa07c4528fd4aa # v1.15.1
         with:
           version: v0.24.0
 

.github/workflows/publish-sim-cli.yml

@@ -108,7 +108,7 @@ jobs:
           } >> "$GITHUB_OUTPUT"
 
       - name: Setup Node 20 for the bundle smoke test
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6
         with:
           node-version: '20'
 

.github/workflows/publish-sim-setup.yml

@@ -105,7 +105,7 @@ jobs:
           } >> "$GITHUB_OUTPUT"
 
       - name: Setup Node 20 for the bundle smoke test
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6
+        uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v6
         with:
           node-version: '20'