build(deps): bump the gha-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the gha-dependencies group with 2 updates in the / directory: actions/setup-node and zizmorcore/zizmor-action.

Updates actions/setup-node from 6.4.0 to 7.0.0

Release notes

Sourced from actions/setup-node's releases.

v7.0.0

What's Changed

Enhancements:

• Add cache-primary-key and cache-matched-key as outputs by @​gowridurgad in actions/setup-node#1577
• Migrate to ESM and upgrade dependencies by @​gowridurgad in actions/setup-node#1574

Bug fixes:

• Remove dummy NODE_AUTH_TOKEN export by @​gowridurgad in actions/setup-node#1558
• Only use mirrorToken in getManifest if it's provided by @​deiga in actions/setup-node#1548

Documentation updates:

• Add documentation for publishing to npm with Trusted Publisher (OIDC) by @​chiranjib-swain in actions/setup-node#1536
• docs: Update restore-only cache documentation by @​priya-kinthali in actions/setup-node#1550
• docs: Update caching recommendations to mitigate cache poisoning risks by @​chiranjib-swain in actions/setup-node#1567

Dependency update:

• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in actions/setup-node#1569

New Contributors

• @​chiranjib-swain made their first contribution in actions/setup-node#1536
• @​deiga made their first contribution in actions/setup-node#1548
• @​jasongin made their first contribution in actions/setup-node#1569

Full Changelog: actions/setup-node@v6...v7.0.0

v6.5.0

What's Changed

• Update @​actions/cache to 5.1.0 and add security overrides for undici and fast-xml-parser by @​HarithaVattikuti in actions/setup-node#1579

Full Changelog: actions/setup-node@v6.4.0...v6.5.0

Commits

• 8207627 Migrate to ESM and upgrade dependencies (#1574)
• 04be95c Add cache-primary-key and cache-matched-key as outputs (#1577)
• 7c2c68d docs: Update caching recommendations to mitigate cache poisoning risks (#1567)
• 6a61c03 Merge pull request #1569 from jasongin/update-actions-cache-5.1.0
• 30eb73b Resolve high-severity audit issues
• 4e1a87a Update dist
• 360237f Strict equality
• 4f8aac5 Bump @​actions/cache to 5.1.0, log cache write denied
• f4a67bb Only use mirrorToken in getManifest if it's provided (#1548)
• 0355742 Remove dummy NODE_AUTH_TOKEN export (#1558)
• Additional commits viewable in compare view

Updates zizmorcore/zizmor-action from 0.5.7 to 0.6.0

Release notes

Sourced from zizmorcore/zizmor-action's releases.

v0.6.0

zizmor 1.27.0 is now the default version used by the action.

What's Changed

• Fold Docker image pull output into a collapsed Actions log group by @​woodruffw with @​Copilot in zizmorcore/zizmor-action#132
• Readme: document missing inputs by @​staabm in zizmorcore/zizmor-action#130
• ci: block version sync workflow on forks by @​shaanmajid in zizmorcore/zizmor-action#129
• Sync zizmor versions by @​github-actions[bot] in zizmorcore/zizmor-action#137
• Add collect input by @​woodruffw in zizmorcore/zizmor-action#139

New Contributors

• @​woodruffw with @​Copilot made their first contribution in zizmorcore/zizmor-action#132
• @​staabm made their first contribution in zizmorcore/zizmor-action#130
• @​shaanmajid made their first contribution in zizmorcore/zizmor-action#129

Full Changelog: zizmorcore/zizmor-action@v0.5.7...v0.6.0

Commits

• 6599ee8 Add collect input (#139)
• bec05c8 Sync zizmor versions (#137)
• cf59549 Add issue templates (#135)
• f72bf17 chore(deps): bump github/codeql-action/upload-sarif (#134)
• b2a6fac ci: block version sync workflow on forks (#129)
• 2d88f44 Readme: document missing inputs (#130)
• d81e276 Fold Docker image pull output into a collapsed Actions log group (#132)
• 8c13c53 chore(deps): bump the github-actions group with 2 updates (#133)
• 2f8e9c6 README: bump versions (#128)
• See full diff in compare view

[rcaril]

@dependabot recreate