Pin unpinned GitHub Actions to commit SHAs

[Copilot]

Most workflows already pin actions by commit SHA with a # vX.Y.Z comment for Dependabot. The entropy beauty workflows still used floating major tags.

Changes

• entropy-beauty-scan.yml: pin cache@v6, upload-artifact@v4, download-artifact@v8, github-script@v9
• entropy-beauty-comment.yml: pin download-artifact@v8, github-script@v9

Format

# before
uses: actions/cache@v6

# after
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0

SHAs resolve to the commits currently pointed at by those tags (v6.1.0, v4.6.2, v8.0.1, v9.0.0).

AI-assisted.

[akarnokd]

@copilot resolve the merge conflicts in this pull request

[Copilot]

@copilot resolve the merge conflicts in this pull request

Resolved by merging origin/4.x in 8feb427. The conflict was actions/upload-artifact (our pin to v4.6.2 vs Dependabot’s bump to v7); kept v7 and pinned it to 043fb46… # v7.0.1.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 98.60%. Comparing base (f6d80d2) to head (8feb427).
⚠️ Report is 1 commits behind head on 4.x.

Additional details and impacted files

@@             Coverage Diff              @@
##                4.x    #8273      +/-   ##
============================================
+ Coverage     98.58%   98.60%   +0.02%     
- Complexity     7147     7148       +1     
============================================
  Files           824      824              
  Lines         50782    50782              
  Branches       6906     6906              
============================================
+ Hits          50064    50076      +12     
+ Misses          488      481       -7     
+ Partials        230      225       -5     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.