chore(deps): Bump the gha-deps group with 3 updates

Bumps the gha-deps group with 3 updates: [ruby/setup-ruby](https://github.com/ruby/setup-ruby), [EmbarkStudios/cargo-deny-action](https://github.com/embarkstudios/cargo-deny-action) and [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels).


Updates `ruby/setup-ruby` from 1.202.0 to 1.207.0
- [Release notes](https://github.com/ruby/setup-ruby/releases)
- [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb)
- [Commits](ruby/setup-ruby@a2bbe5b...4a9ddd6)

Updates `EmbarkStudios/cargo-deny-action` from 2.0.3 to 2.0.4
- [Release notes](https://github.com/embarkstudios/cargo-deny-action/releases)
- [Commits](EmbarkStudios/cargo-deny-action@2d8c992...e2f4ede)

Updates `mheap/github-action-required-labels` from 5.4.2 to 5.5.0
- [Release notes](https://github.com/mheap/github-action-required-labels/releases)
- [Commits](mheap/github-action-required-labels@d25134c...388fd6a)

---
updated-dependencies:
- dependency-name: ruby/setup-ruby
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
- dependency-name: EmbarkStudios/cargo-deny-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gha-deps
- dependency-name: mheap/github-action-required-labels
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gha-deps
...

Signed-off-by: dependabot[bot] <[email protected]>

.github/workflows/audit.yaml

@@ -19,7 +19,7 @@ jobs:
         uses: actions/[email protected]
 
       - name: Install Ruby toolchain
-        uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc # v1.202.0
+        uses: ruby/setup-ruby@4a9ddd6f338a97768b8006bf671dfbad383215f4 # v1.207.0
         with:
           ruby-version: ".ruby-version"
           bundler-cache: true
@@ -52,7 +52,7 @@ jobs:
             cargo generate-lockfile --verbose
           fi
 
-      - uses: EmbarkStudios/cargo-deny-action@2d8c9929d8f9f42bedba73f1287cb0b479f07acb # v2.0.3
+      - uses: EmbarkStudios/cargo-deny-action@e2f4ede4a4e60ea15ff31bc0647485d80c66cfba # v2.0.4
         with:
           arguments: --locked --all-features
           command: check ${{ matrix.checks }}

.github/workflows/block-merge.yaml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: mheap/github-action-required-labels@d25134c992b943fb6ad00c25ea00eb5988c0a9dd # v5.4.2
+      - uses: mheap/github-action-required-labels@388fd6af37b34cdfe5a23b37060e763217e58b03 # v5.5
         with:
           mode: exactly
           count: 0

.github/workflows/ci.yaml

@@ -148,7 +148,7 @@ jobs:
         uses: actions/[email protected]
 
       - name: Install Ruby toolchain
-        uses: ruby/setup-ruby@a2bbe5b1b236842c1cb7dd11e8e3b51e0a616acc # v1.202.0
+        uses: ruby/setup-ruby@4a9ddd6f338a97768b8006bf671dfbad383215f4 # v1.207.0
         with:
           ruby-version: ".ruby-version"
           bundler-cache: true