Bump the gha group with 2 updates (#149)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

.github/workflows/bench.yaml

@@ -13,7 +13,7 @@ jobs:
   bench:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5
         with:
           go-version-file: go.work
@@ -28,7 +28,7 @@ jobs:
 
       - run: go run mage wafbenchall
 
-      - uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v3
+      - uses: actions/upload-artifact@604373da6381bf24206979c74d06a550515601b9 # v3
         with:
           name: results
           path: build/*bench*.txt

.github/workflows/ci.yaml

@@ -31,7 +31,7 @@ jobs:
           - os: macos-14
             mode: tinygo
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5
         with:
           # TODO: Split lint step to allow it to have a higher minimum Go requirement.
@@ -93,7 +93,7 @@ jobs:
       runs-on: ubuntu-latest
 
       steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
       - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5
         with:
           go-version-file: go.work
@@ -124,7 +124,7 @@ jobs:
     container:
       image: golang:alpine
     steps:
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
 
       - run: if command -v gcc &> /dev/null; then echo "GCC found but not expected"; exit 321; fi
 

.github/workflows/wasm.yaml

@@ -29,7 +29,7 @@ jobs:
           app-id: ${{ vars.WASILIBS_APP_ID }}
           private-key: ${{ secrets.WASILIBS_APP_PRIVATE_KEY }}
 
-      - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4
+      - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4
         with:
           token: ${{ github.event_name != 'pull_request' && steps.app-token.outputs.token || github.token }}