chore(deps): bump the gha-minor group with 2 updates

.github/workflows/audit.yml

@@ -56,7 +56,7 @@ jobs:
       - name: Install cargo-audit
         # Prebuilt, checksum-verified binary — the previous `cargo install`
         # compiled it from source on every run (~3 min).
-        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2.81.10
+        uses: taiki-e/install-action@9e1e5806d4a4822de933115878265be9aaa786d9 # v2.82.2
         with:
           tool: cargo-audit@0.22.2
       - name: Audit the workspace lockfile

.github/workflows/ci.yml

@@ -75,7 +75,7 @@ jobs:
         # Prebuilt binary, checksum-verified internally against install-action's
         # signed manifests — replaces a hand-maintained curl + sha256 pin.
         # (actionlint above keeps the curl form: install-action doesn't carry it.)
-        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2.81.10
+        uses: taiki-e/install-action@9e1e5806d4a4822de933115878265be9aaa786d9 # v2.82.2
         with:
           tool: taplo@0.10.0
       - name: taplo

.github/workflows/fuzz.yml

@@ -45,7 +45,7 @@ jobs:
       - name: Install cargo-fuzz
         # Prebuilt, checksum-verified binary — the previous `cargo install`
         # compiled it from source on every run.
-        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2.81.10
+        uses: taiki-e/install-action@9e1e5806d4a4822de933115878265be9aaa786d9 # v2.82.2
         with:
           tool: cargo-fuzz@0.13.2
       - name: Restore evolved corpus

.github/workflows/release.yml

@@ -170,7 +170,7 @@ jobs:
         with:
           path: dist
           merge-multiple: true
-      - uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3
+      - uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3
         with:
           generate_release_notes: true
           files: dist/*