deps: update GitHub action dependencies

Author: renovate[bot]

.github/actions/setup_nix/action.yml

@@ -32,7 +32,7 @@ runs:
         sudo mkdir -p /nix/bld
         sudo findmnt
         sudo df -h
-    - uses: cachix/install-nix-action@2126ae7fc54c9df00dd18f7f18754393182c73cd # v31.9.1
+    - uses: cachix/install-nix-action@616559265b40713947b9c190a8ff4b507b5df49b # v31.10.4
       with:
         github_access_token: ${{ inputs.githubToken }}
         extra_nix_config: ${{ runner.os == 'Linux' && 'build-dir = /nix/bld' || '' }}

.github/workflows/backport.yml

@@ -27,7 +27,7 @@ jobs:
           token: ${{ secrets.NUNKI_CI_COMMIT_PUSH_PR }}
           persist-credentials: true
       - name: Create backport PRs
-        uses: korthout/backport-action@01619ebc9a6e3f6820274221b9956b3e7365000a # v4.1.0
+        uses: korthout/backport-action@ad30f01dbe543be4a24431001c38f3617af8c745 # v4.4
         with:
           copy_milestone: true
           copy_labels_pattern: '.*'

.github/workflows/links.yml

@@ -27,7 +27,7 @@ jobs:
           cachixToken: ${{ secrets.CACHIX_AUTH_TOKEN }}
       - name: Restore lychee cache
         id: restore-cache
-        uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         with:
           path: .lycheecache
           key: cache-lychee-${{ github.sha }}
@@ -38,7 +38,7 @@ jobs:
         run: |
           nix run ".#${SET}.nixpkgs.lychee" -- --config tools/lychee/config-external.toml .
       - name: Save lychee cache
-        uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3
+        uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
         if: always()
         with:
           path: .lycheecache

.github/workflows/release.yml

@@ -206,7 +206,7 @@ jobs:
           working-directory: contrast-main
           commit: false
       - name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
           title: Post ${{ needs.process-inputs.outputs.WITHOUT_V }} release updates to main
           body: |
@@ -325,7 +325,7 @@ jobs:
             LICENSE
             ${{ steps.create-artifacts.outputs.paths }}
       - name: Create draft release
-        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
+        uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2
         with:
           draft: true
           generate_release_notes: true

.github/workflows/require_label.yml

@@ -10,7 +10,7 @@ jobs:
     permissions:
       pull-requests: read
     steps:
-      - uses: mheap/github-action-required-labels@8afbe8ae6ab7647d0c9f0cfa7c2f939650d22509 # v5.5.1
+      - uses: mheap/github-action-required-labels@0ac283b4e65c1fb28ce6079dea5546ceca98ccbe # v5.5.2
         with:
           mode: exactly
           count: 1

.github/workflows/rim_updates.yml

@@ -28,7 +28,7 @@ jobs:
         run: |
           nix run ".#${SET}.scripts.get-nvidia-rim-ids" > dev-docs/nvidia/rim-ids.json
       - name: Create PR
-        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
         with:
           title: "dev-docs: update NVIDIA RIM IDs"
           body: "Automated updated created by [rim_updates workflow](https://github.com/edgelesssys/contrast/blob/main/.github/workflows/rim_updates.yml)."