ci: bump the actions group with 13 updates

.github/workflows/build.yml

@@ -489,7 +489,7 @@ jobs:
           ref: ${{ inputs.ref || github.sha }}
 
       - name: Build in FreeBSD VM
-        uses: vmactions/freebsd-vm@d0518f912576ae759075aa00fb9fe27037940271 # v1.5.4
+        uses: vmactions/freebsd-vm@f0552d3b69211736abd97f02ff3d4674c56b73b1 # v1.5.5
         with:
           usesh: true
           # Newest stable image the builder publishes, pinned explicitly rather than
@@ -581,7 +581,7 @@ jobs:
           ref: ${{ inputs.ref || github.sha }}
 
       - name: Build in FreeBSD aarch64 VM
-        uses: vmactions/freebsd-vm@d0518f912576ae759075aa00fb9fe27037940271 # v1.5.4
+        uses: vmactions/freebsd-vm@f0552d3b69211736abd97f02ff3d4674c56b73b1 # v1.5.5
         with:
           usesh: true
           # Same pin and the same 15.x-only reach tradeoff as the x86_64 job.
@@ -646,7 +646,7 @@ jobs:
           ref: ${{ inputs.ref || github.sha }}
 
       - name: Build in OpenBSD VM
-        uses: vmactions/openbsd-vm@e6c68b637a12e83519688d115d57d5b0b53923cd # v1.4.6
+        uses: vmactions/openbsd-vm@86cdc08415d9d0865267e686561e276c52d62530 # v1.4.7
         with:
           usesh: true
           # Newest image available. OpenBSD makes no cross-release ABI promise,
@@ -720,7 +720,7 @@ jobs:
           ref: ${{ inputs.ref || github.sha }}
 
       - name: Build in NetBSD VM
-        uses: vmactions/netbsd-vm@00081e82b14bc40114eb97f32b4455306828516b # v1.4.6
+        uses: vmactions/netbsd-vm@07366ff288a2661e3998b69c5d48eda270050635 # v1.4.8
         with:
           usesh: true
           # Latest stable image published by vmactions.
@@ -771,7 +771,7 @@ jobs:
           ref: ${{ inputs.ref || github.sha }}
 
       - name: Build in DragonFlyBSD VM
-        uses: vmactions/dragonflybsd-vm@a7ede19f8f21f25f1abfc728aca9a02af5aa7f6a # v1.3.2
+        uses: vmactions/dragonflybsd-vm@7cd7c9b7f2b06e8e03d2337a9476995f3c112acf # v1.3.3
         with:
           usesh: true
           # This is the newest image vmactions publishes. DragonFly's official
@@ -827,7 +827,7 @@ jobs:
           ref: ${{ inputs.ref || github.sha }}
 
       - name: Build in Haiku VM
-        uses: vmactions/haiku-vm@0ba6b98c8d7e5626f9defdd7403af49ad72b51df # v1.1.3
+        uses: vmactions/haiku-vm@6a07e023ed05895c09aa73843b58cfa671f34594 # v1.1.5
         with:
           release: "r1beta5"
           cpu: "4"
@@ -879,7 +879,7 @@ jobs:
           ref: ${{ inputs.ref || github.sha }}
 
       - name: Build in GNU/Hurd VM
-        uses: vmactions/hurd-vm@12ce185b5e88948ae6f23f8675d356a35ff665f3 # v1.0.0
+        uses: vmactions/hurd-vm@a116077bec07c4f07f6efc88a45270a021ffac52 # v1.0.1
         with:
           release: "2025"
           cpu: "4"
@@ -944,7 +944,7 @@ jobs:
           ref: ${{ inputs.ref || github.sha }}
 
       - name: Build in Solaris VM
-        uses: vmactions/solaris-vm@315163f088b66e55bbcc45928bd224d4973b2312 # v1.3.8
+        uses: vmactions/solaris-vm@96d8d976f9e67d82ec6c7e8ce9c1060731f9e21c # v1.3.9
         with:
           release: "11.4-gcc"
           cpu: "4"
@@ -1023,7 +1023,7 @@ jobs:
           ref: ${{ inputs.ref || github.sha }}
 
       - name: Build in OmniOS VM
-        uses: vmactions/omnios-vm@f777b9ef6bf644b6c9a33e018bd158b5b1982f06 # v1.3.5
+        uses: vmactions/omnios-vm@317e4f8069dad8a65e1520808f1a68ef3fd20565 # v1.3.6
         with:
           usesh: true
           # Newest image the builder publishes. Unlike the FreeBSD pin, newer

.github/workflows/platform-compat.yml

@@ -51,7 +51,7 @@ jobs:
             --dir compat
 
       - name: Smoke test on OpenIndiana
-        uses: vmactions/openindiana-vm@52f16d4534fe3edd9d9621621c238398d4d2a698 # v1.1.5
+        uses: vmactions/openindiana-vm@21e57a45fc8dbfc8b20804ba707c1dad6c271b4f # v1.1.6
         with:
           release: "202604"
           usesh: true
@@ -91,7 +91,7 @@ jobs:
             --dir compat
 
       - name: Smoke test on Tribblix
-        uses: vmactions/tribblix-vm@0e661d78e9c57de32d06538807d2e49b8bd5058e # v1.0.4
+        uses: vmactions/tribblix-vm@238d918a36eaef5ea23791b5f8a8e5c9a4917984 # v1.0.5
         with:
           release: "0m40"
           usesh: true
@@ -122,7 +122,7 @@ jobs:
             --dir compat
 
       - name: Smoke test on GhostBSD
-        uses: vmactions/ghostbsd-vm@5ed1dcce064c887d3767fc00ac0176a51fdd4e74 # v1.0.2
+        uses: vmactions/ghostbsd-vm@47d491c56cd289e73f89e24838195aa66e4460be # v1.0.3
         with:
           release: "26.1"
           usesh: true
@@ -154,7 +154,7 @@ jobs:
           chmod +x compat/cleave
 
       - name: Smoke test on openEuler
-        uses: vmactions/openeuler-vm@694e5d6637c08e6ed139a0403bae8041d5651e20 # v1.0.0
+        uses: vmactions/openeuler-vm@b8191b00fdc7bf7703d1404062bfde47aa805c1f # v1.0.1
         with:
           release: "25.09"
           usesh: true
@@ -187,7 +187,7 @@ jobs:
       # artifact is static and only asks BlissOS for a compatible Linux kernel
       # and permission to execute files copied into the VM.
       - name: Probe static musl binary on BlissOS
-        uses: vmactions/blissos-vm@aa5109850186555568e720ca897237440645ef10 # v1.0.1
+        uses: vmactions/blissos-vm@e4a4ae2a90caadc53ea5dc6b5d22d0c6de914f64 # v1.0.2
         with:
           release: "16"
           sync: scp