[16.2.x] Align Actions dependencies with Canary

[eps1lon]

The main motivation is getting the latest actions/checkout version which ensures we use the expected token in trigger_release i.e. this should fix the trigger release workflow for 16.2.

Cherry-picks Action version changes from:

1. [turbopack] Improve regressed build speed on cross-compiled MUSL #91477
2. Pin upload-artifact to v7.0.1 and download-artifact to v8.0.1 #92757
3. fix: pin 19 actions to commit SHA, extract 7 expressions to env vars #92016
4. [ci] Also pin first-party GH actions #93609
5. [ci] Explicitly disable package-manager-cache for uses of actions/setup-node #93953
6. [ci] Update all actions/* dependencies #94174

Test plan

• trigger release is able to create a tag: https://github.com/vercel/next.js/actions/runs/26818383987/job/79065987587#step:15:27 ->

[github-actions]

Stats skipped

Commit: 7288ca0
View workflow run

[github-actions]

Failing test suites

Commit: 7288ca0 | About building and testing Next.js

pnpm test-start test/e2e/app-dir/next-after-app-static/build-time/build-time.test.ts (job)

• after() in static pages > runs after during build (DD)

Expand output

● after() in static pages › runs after during build

can not run export while server is running, use next.stop() first

  251 |   ) {
  252 |     if (this.childProcess) {
> 253 |       throw new Error(
      |             ^
  254 |         `can not run export while server is running, use next.stop() first`
  255 |       )
  256 |     }

  at NextStartInstance.build (lib/next-modes/next-start.ts:253:13)
  at Object.build (e2e/app-dir/next-after-app-static/build-time/build-time.test.ts:36:36)

pnpm test-start test/production/dynamic-css-client-navigation/react-lazy.test.ts (job)

• dynamic-css-client-navigation react lazy edge > should not remove style when navigating from static imported component to react lazy at runtime edge (DD)
• dynamic-css-client-navigation react lazy nodejs > should not remove style when navigating from static imported component to react lazy at runtime nodejs (DD)

Expand output

● dynamic-css-client-navigation react lazy edge › should not remove style when navigating from static imported component to react lazy at runtime edge

expect(received).toBe(expected) // Object.is equality

Expected: "rgb(255, 0, 0)"
Received: null

  22 |       )
  23 |
> 24 |       expect(buttonBgColor).toBe('rgb(255, 0, 0)')
     |                             ^
  25 |     })
  26 |   }
  27 | )

  at Object.toBe (production/dynamic-css-client-navigation/react-lazy.test.ts:24:29)

● dynamic-css-client-navigation react lazy nodejs › should not remove style when navigating from static imported component to react lazy at runtime nodejs

expect(received).toBe(expected) // Object.is equality

Expected: "rgb(255, 0, 0)"
Received: null

  22 |       )
  23 |
> 24 |       expect(buttonBgColor).toBe('rgb(255, 0, 0)')
     |                             ^
  25 |     })
  26 |   }
  27 | )

  at Object.toBe (production/dynamic-css-client-navigation/react-lazy.test.ts:24:29)

pnpm test-dev-turbo test/e2e/app-dir/interception-dynamic-single-segment/interception-dynamic-single-segment.test.ts (turbopack) (job)

• interception-dynamic-single-segment > should intercept with consecutive dynamic segments (DD)

Expand output

● interception-dynamic-single-segment › should intercept with consecutive dynamic segments

expect(received).toContain(expected) // indexOf

Expected substring: "Modal: Item for path x/y/z"
Received string:    "default"

  161 |     await retry(async () => {
  162 |       const modalText = await browser.elementById('modal').text()
> 163 |       expect(modalText).toContain('Modal: Item for path x/y/z')
      |                         ^
  164 |     })
  165 |
  166 |     // The children should still show the consecutive page

  at toContain (e2e/app-dir/interception-dynamic-single-segment/interception-dynamic-single-segment.test.ts:163:25)
  at retry (lib/next-test-utils.ts:861:14)
  at Object.<anonymous> (e2e/app-dir/interception-dynamic-single-segment/interception-dynamic-single-segment.test.ts:161:5)