chore(deps): update github actions non-major updates

.github/workflows/benchmark.yml

@@ -73,7 +73,7 @@ jobs:
             --markdown benchmark-output/benchmark.md
 
       - name: Upload benchmark evidence
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: benchmark-${{ github.sha }}
           path: benchmark-output/

.github/workflows/ci.yml

@@ -72,7 +72,7 @@ jobs:
 
       - name: Upload native logs (if any)
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: logs-native-${{ matrix.os }}
           path: |
@@ -119,7 +119,7 @@ jobs:
 
       - name: Upload build logs (if any)
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: logs-${{ matrix.env }}
           path: |
@@ -166,7 +166,7 @@ jobs:
 
       - name: Upload smoke logs (if any)
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: logs-smoke
           path: |

.github/workflows/commit-lint.yml

@@ -24,4 +24,4 @@ jobs:
     name: Policy
     permissions:
       contents: read
-    uses: z-shell/.github/.github/workflows/commit-lint.yml@6fac3d47a61b27db54e50a0519c1e79b2935eda4 # main
+    uses: z-shell/.github/.github/workflows/commit-lint.yml@cf854972f5d84a4a71229a4208ac9d3570b6ee48 # main

.github/workflows/docs.yml

@@ -37,7 +37,7 @@ jobs:
           docker compose -f docker/docker-compose.yml run --rm build-docs-clean
 
       - name: Upload docs artifact
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: docs-site
           path: build-results/docs

.github/workflows/org-routing.yml

@@ -17,4 +17,4 @@ jobs:
     name: Org Routing
     permissions:
       contents: read
-    uses: z-shell/.github/.github/workflows/org-routing.yml@dc233851b57784314f99ce5099ea00fc05dc303d # main
+    uses: z-shell/.github/.github/workflows/org-routing.yml@cf854972f5d84a4a71229a4208ac9d3570b6ee48 # main

.github/workflows/qualification.yml

@@ -37,7 +37,7 @@ jobs:
           persist-credentials: false
       - name: Install selected runtime
         id: runtime
-        uses: z-shell/.github/actions/setup-zsh@00d5d47783fb80c739edf89e39ae47274b9f503e # main
+        uses: z-shell/.github/actions/setup-zsh@cf854972f5d84a4a71229a4208ac9d3570b6ee48 # main
         with:
           version: ${{ matrix.version }}
           patch-set: ${{ matrix.patch }}
@@ -66,7 +66,7 @@ jobs:
           bash scripts/qualify-zi.sh
       - name: Retain qualification evidence
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: qualification-${{ matrix.os }}-${{ matrix.version }}
           path: |
@@ -121,7 +121,7 @@ jobs:
           bash scripts/qualify-package.sh
       - name: Retain package evidence
         if: always()
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: qualification-package-${{ matrix.format }}
           path: qualification-results/

.github/workflows/release.yml

@@ -152,7 +152,7 @@ jobs:
             --cpack-generators "$GEN"
 
       - name: Upload package artifacts
-        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: packages-${{ matrix.platform }}
           path: |
@@ -184,7 +184,7 @@ jobs:
           sudo apt-get install -y zsh
 
       - name: Download all artifacts
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           path: artifacts
           merge-multiple: true

.github/workflows/trunk-check.yml

@@ -26,7 +26,7 @@ jobs:
     name: Trunk Code Quality
     permissions:
       contents: read
-    uses: z-shell/.github/.github/workflows/trunk.yml@18433229ccbfc9e59332710ee3cc1ba5b920b49c # main
+    uses: z-shell/.github/.github/workflows/trunk.yml@cf854972f5d84a4a71229a4208ac9d3570b6ee48 # main
     with:
       arguments: --no-progress
       # clang-tidy reads compile_commands.json, which Trunk's own prepare step