[ci] Update 5 actions in 8 workflows (#17024)

* Bump actions/cache v5.0.5 => v6.1.0
* Bump actions/setup-python v6.2.0 => v6.3.0
* Bump docker/setup-qemu-action v4.1.0 => v4.2.0
* Bump github/codeql-action v4.36.2 => v4.36.3
* Bump zizmorcore/zizmor-action v0.5.6 => v0.5.7

Authored by: dlp-bot

.github/workflows/test-workflows.yml

@@ -30,7 +30,7 @@ jobs:
         with:
           persist-credentials: false
 
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405  # v6.2.0
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1  # v6.3.0
         with:
           python-version: "3.13"  # Keep this in sync with release.yml's prepare job
 
@@ -83,7 +83,7 @@ jobs:
           persist-credentials: false
 
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d  # v0.5.6
+        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa  # v0.5.7
         with:
           advanced-security: false
           persona: pedantic