[ci] Bump actions pins (#16252)

* Bump actions/cache v5.0.2 → v5.0.3
* Bump actions/download-artifact v7.0.0 → v8.0.1
* Bump actions/setup-node v6.2.0 → v6.3.0
* Bump actions/upload-artifact v6.0.0 → v7.0.0
* Bump docker/setup-qemu-action v3.7.0 → v4.0.0
* Bump github/codeql-action v4.31.9 → v4.33.0
* Bump oven-sh/setup-bun v2.1.2 → v2.2.0
* Bump zizmorcore/zizmor-action v0.4.1 → v0.5.2
* Bump actionlint v1.7.9 → v1.7.11
* Bump zizmor v1.22.0 → v1.23.1
* Adapt zizmor configuration to new version

Authored by: bashonly

.github/workflows/challenge-tests.yml

@@ -50,13 +50,13 @@ jobs:
       with:
         deno-version: '2.0.0'  # minimum supported version
     - name: Install Bun
-      uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3  # v2.1.2
+      uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6  # v2.2.0
       with:
         # minimum supported version is 1.0.31 but earliest available Windows version is 1.1.0
         bun-version: ${{ (matrix.os == 'windows-latest' && '1.1.0') || '1.0.31' }}
         no-cache: true
     - name: Install Node
-      uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238  # v6.2.0
+      uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f  # v6.3.0
       with:
         node-version: '20.0'  # minimum supported version
     - name: Install QuickJS (Linux)