Update all non-major dependencies

Author: renovate[bot]

.github/workflows/release.yml

@@ -138,7 +138,7 @@ jobs:
       # against the downloaded artifact so anything that tampered with the
       # binary between upload and publish trips a digest mismatch.
       - name: Attest build provenance for release binaries
-        uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
+        uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2
         with:
           subject-path: 'release/signal-desktop-unofficial*'
       - run: xvfb-run --auto-servernum pnpm run test-node

.github/workflows/zizmor.yml

@@ -24,4 +24,4 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
         with:
           persist-credentials: false
-      - uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
+      - uses: zizmorcore/zizmor-action@3dc1ecc9bcb9e94e9b2c709687979e1298497054 # v0.6.2