ci(memory): harden benchmark reporting

.github/workflows/memory-benchmark.yml

@@ -27,27 +27,27 @@ jobs:
 
     steps:
       - name: Check out benchmark implementation
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           path: benchmark
           persist-credentials: false
 
       - name: Check out base revision
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.base.sha }}
           path: base
           persist-credentials: false
 
       - name: Check out PR revision
-        uses: actions/checkout@v4
+        uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.sha }}
           path: head
           persist-credentials: false
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v7
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: npm
@@ -55,7 +55,7 @@ jobs:
             base/package-lock.json
             head/package-lock.json
 
-      - uses: oven-sh/setup-bun@v2
+      - uses: oven-sh/setup-bun@v2.2.0
         with:
           bun-version: ${{ env.BUN_VERSION }}
 
@@ -93,7 +93,7 @@ jobs:
 
       - name: Upload benchmark report
         if: always() && hashFiles('memory-benchmark.md') != ''
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: memory-benchmark-report
           path: |
@@ -116,12 +116,12 @@ jobs:
 
     steps:
       - name: Download benchmark report
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           name: memory-benchmark-report
 
       - name: Update sticky PR comment
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         env:
           REPORT_PATH: memory-benchmark.md
         with: