Bump the github-actions group with 2 updates

.github/workflows/calibreapp-image-actions.yml

@@ -8,6 +8,7 @@ on:
       - '**.jpeg'
       - '**.png'
       - '**.webp'
+
 permissions:
   contents: write
   pull-requests: write
@@ -28,7 +29,7 @@ jobs:
         uses: actions/checkout@v7
 
       - name: Compress Images
-        uses: calibreapp/image-actions@c3752f0cc46d3f73677f20c7bfe20ed4601ba2a3 # main
+        uses: calibreapp/image-actions@main
         with:
           # The `GITHUB_TOKEN` is automatically generated by GitHub and scoped only to the repository that is currently running the action. By default, the action can’t update Pull Requests initiated from forked repositories.
           # See https://docs.github.com/en/actions/reference/authentication-in-a-workflow and https://help.github.com/en/articles/virtual-environments-for-github-actions#token-permissions

.github/workflows/compress-images.yml

@@ -4,7 +4,8 @@ name: Compress Images
 on:
   workflow_dispatch:
   schedule:
-    - cron: '00 23 * * 0'
+    - cron: "00 23 * * 0"
+
 permissions:
   contents: write
   pull-requests: write
@@ -23,7 +24,7 @@ jobs:
         uses: actions/checkout@v7
       - name: Compress Images
         id: calibre
-        uses: calibreapp/image-actions@c3752f0cc46d3f73677f20c7bfe20ed4601ba2a3 # main
+        uses: calibreapp/image-actions@main
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           compressOnly: true

.github/workflows/deploy.yml

@@ -26,7 +26,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up pnpm and Node.js
-        uses: pnpm/setup@v3.0.0
+        uses: pnpm/setup@v3.1.1
         with:
           working-directory: docs
           runtime: node@26

.github/workflows/servers.yml

@@ -26,7 +26,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Set up pnpm and Node.js
-        uses: pnpm/setup@v3.0.0
+        uses: pnpm/setup@v3.1.1
         with:
           working-directory: servers
           runtime: node@26