chore(deps): consolidate Dependabot #336-#338 (wide, clap_complete, 2 actions)

.github/workflows/android.yml

@@ -122,7 +122,7 @@ jobs:
           java-version: '17'
       - name: Resolve NDK
         run: echo "ANDROID_NDK_HOME=$ANDROID_NDK_LATEST_HOME" >> "$GITHUB_ENV"
-      - uses: gradle/actions/setup-gradle@v6
+      - uses: gradle/actions/setup-gradle@v6.2.0
         with:
           # v6 extracted the default ("enhanced") Gradle User Home cache into the
           # closed-source `gradle-actions-caching` library (separate Terms of Use).

.github/workflows/security.yml

@@ -60,7 +60,7 @@ jobs:
       # cargo-audit release needs >= 1.88 to COMPILE. The prebuilt binary RUNS
       # fine under any toolchain — it only parses Cargo.lock, it never compiles
       # the project — so the toolchain pin is irrelevant to it.
-      - uses: taiki-e/install-action@v2
+      - uses: taiki-e/install-action@v2.85.5
         with:
           tool: cargo-audit
       - run: cargo audit
@@ -75,7 +75,7 @@ jobs:
       # Prebuilt binary for the same reason as the audit job: the latest
       # cargo-deny needs rustc >= 1.88 to build from source, while the repo is
       # pinned to 1.96. Policy lives in `deny.toml`.
-      - uses: taiki-e/install-action@v2
+      - uses: taiki-e/install-action@v2.85.5
         with:
           tool: cargo-deny
       - run: cargo deny check