chore(ci): bump GitHub Actions to latest versions

[Project516]

What Changed

Bumped every GitHub Action in .github/workflows/ to the latest major version.

Action	From	To
actions/checkout	v6 (and v4 in pr-size)	v7
actions/github-script	v8 (and v7 in issue-labels)	v9
actions/download-artifact	v7 (one step in release)	v8
actions/create-github-app-token	v2	v3
softprops/action-gh-release	v2	v3
expo/expo-github-action	v8 (+ continuous-deploy-fingerprint@main)	v9
gradle/actions/setup-gradle	v5	v6

Actions already on the latest major were left alone (setup-vp@v1, rust-toolchain@stable, upload-artifact@v7, vouch@v1, setup-java@v5, android-emulator-runner@v2). The expo fingerprint sub-action is now pinned to the released v9 tag instead of @main.

Why

A sweep of open and closed PRs found no update of the GitHub Actions to their latest versions, so CI/CD has drifted behind upstream releases. Kept scope tight: no workflow logic changes, only version pins.

Compatibility checked before bumping:

• github-script@v9 breaks require('@actions/github'); no workflow script uses it.
• All inputs in use exist in the new majors (action-gh-release@v3, create-github-app-token@v3, expo-github-action@v9).
• checkout@v7's safer pull_request_target default is safe here — the pr-size label job only checks out the base repo.

UI Changes

N/A — CI-only changes.

Checklist

• This PR is small and focused
• I explained what changed and why
• I included before/after screenshots for any UI changes (N/A)
• I included a video for animation/interaction changes (N/A)

---

Note: gradle/actions/setup-gradle@v6 moves the caching component to Gradle's proprietary gradle-actions-caching library (MIT only when caching is disabled) — flagging in case that's a blocker; it only affects the manual screenshot workflow.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 37515599-84fb-4d2f-9824-656144c702fd

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[macroscopeapp]

Approvability

Verdict: Approved 75f54c1

Mechanical version bumps of GitHub Actions across workflow files (checkout, github-script, download-artifact, expo-github-action, etc.). No changes to workflow logic or deployment behavior - purely dependency version updates.

^{You can customize Macroscope's approvability policy. Learn more.}