🔼(deps): Bump the github-actions group with 11 updates

.github/workflows/build-go.yml

@@ -34,13 +34,13 @@ jobs:
     runs-on: ${{ inputs.os }}
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: 💾 Cache Go helpers
         id: cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             dist/bin/flavor-go-*-${{ inputs.version }}-${{ inputs.platform }}
@@ -49,14 +49,14 @@ jobs:
           key: ${{ inputs.go_cache_key_base }}-${{ inputs.platform }}-${{ inputs.version }}
 
       - name: 📦 Setup uv + Python
-        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           python-version: '3.11'
           enable-cache: false
 
       - name: 🐹 Setup Go
         if: steps.cache.outputs.cache-hit != 'true'
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "${{ vars.GO_VERSION }}"
           cache-dependency-path: src/flavor-go/go.sum

.github/workflows/build-rust.yml

@@ -38,13 +38,13 @@ jobs:
     runs-on: ${{ inputs.os }}
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: 💾 Cache Rust helpers
         id: cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             dist/bin/flavor-rs-*-${{ inputs.version }}-${{ inputs.platform }}
@@ -53,7 +53,7 @@ jobs:
           key: ${{ inputs.rust_cache_key_base }}-${{ inputs.platform }}-${{ inputs.version }}
 
       - name: 📦 Setup uv + Python
-        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           python-version: '3.11'
           enable-cache: false

.github/workflows/build-tastesh.yml

@@ -30,13 +30,13 @@ jobs:
     runs-on: ${{ inputs.os }}
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: 💾 Cache tastesh
         id: cache
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         with:
           path: |
             dist/bin/flavor-tastesh-${{ inputs.platform }}
@@ -55,7 +55,7 @@ jobs:
 
       - name: 🔧 Setup Go (Windows — builds tastesh-win Go interpreter)
         if: steps.cache.outputs.cache-hit != 'true' && runner.os == 'Windows'
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version-file: ci/tastesh-win/go.mod
           cache-dependency-path: ci/tastesh-win/go.sum

.github/workflows/code-quality.yml

@@ -49,13 +49,13 @@ jobs:
       pull-requests: write
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
           fetch-depth: 0  # Full history for better analysis
 
       - name: 📦 Setup uv + Python
-        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           python-version: '3.11'
 
@@ -423,12 +423,12 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: 🐹 Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "${{ vars.GO_VERSION }}"
           cache: true
@@ -517,7 +517,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -529,7 +529,7 @@ jobs:
           cache: true
 
       - name: 📦 Cache Rust Quality Tools
-        uses: actions/cache@v5
+        uses: actions/cache@v6
         id: cache-rust-tools
         with:
           path: |
@@ -674,12 +674,12 @@ jobs:
     continue-on-error: true
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: 📦 Setup uv + Python
-        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           python-version: '3.11'
 
@@ -732,12 +732,12 @@ jobs:
     continue-on-error: true
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: 🐹 Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version-file: src/flavor-go/go.mod
 
@@ -783,7 +783,7 @@ jobs:
     continue-on-error: true
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 

.github/workflows/compatibility-check.yml

@@ -22,12 +22,12 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: 🐹 Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "${{ vars.GO_VERSION }}"
 
@@ -71,7 +71,7 @@ jobs:
           - { name: "Alpine Latest", image: "alpine:latest", arch: "amd64", glibc: "musl" }
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -112,7 +112,7 @@ jobs:
           - { name: "Arch Linux", image: "archlinux:latest", glibc: "latest" }
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -147,7 +147,7 @@ jobs:
           - { name: "Amazon Linux 2023 ARM64", image: "arm64v8/amazonlinux:2023" }
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -187,7 +187,7 @@ jobs:
           - { name: "Fedora 39", image: "fedora:39", install: "dnf install -y python3 python3-pip" }
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -216,7 +216,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 

.github/workflows/dependency-audit.yml

@@ -46,12 +46,12 @@ jobs:
       update_count: ${{ steps.check.outputs.update_count }}
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: 📦 Setup uv + Python
-        uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           python-version: '3.11'
 
@@ -237,12 +237,12 @@ jobs:
       has_updates: ${{ steps.check.outputs.has_updates }}
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
       - name: 🐹 Setup Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version: "${{ vars.GO_VERSION }}"
 
@@ -391,7 +391,7 @@ jobs:
       has_updates: ${{ steps.check.outputs.has_updates }}
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 
@@ -552,7 +552,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
 

.github/workflows/exp-freebsd.yml

@@ -16,7 +16,7 @@ jobs:
 
     steps:
       - name: 📥 Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           persist-credentials: false
           fetch-depth: 0
@@ -29,7 +29,7 @@ jobs:
           echo "📦 Version: $VERSION"
 
       - name: 🐡 Build and test inside FreeBSD VM
-        uses: cross-platform-actions/action@v0.32.0
+        uses: cross-platform-actions/action@v1.4.0
         with:
           operating_system: freebsd
           version: ${{ inputs.freebsd_version || '14.2' }}