Bump the github-actions group with 6 updates

Bumps the github-actions group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `2` | `4` |
| [actions/setup-node](https://github.com/actions/setup-node) | `3` | `4` |
| [JS-DevTools/npm-publish](https://github.com/js-devtools/npm-publish) | `1` | `3` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `2` | `4` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `2` | `4` |
| [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `4.0.4` | `6.0.2` |


Updates `actions/checkout` from 2 to 4
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2...v4)

Updates `actions/setup-node` from 3 to 4
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@v3...v4)

Updates `JS-DevTools/npm-publish` from 1 to 3
- [Release notes](https://github.com/js-devtools/npm-publish/releases)
- [Changelog](https://github.com/JS-DevTools/npm-publish/blob/main/CHANGELOG.md)
- [Commits](JS-DevTools/npm-publish@v1...v3)

Updates `actions/upload-artifact` from 2 to 4
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v2...v4)

Updates `actions/download-artifact` from 2 to 4
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](actions/download-artifact@v2...v4)

Updates `peter-evans/create-pull-request` from 4.0.4 to 6.0.2
- [Release notes](https://github.com/peter-evans/create-pull-request/releases)
- [Commits](peter-evans/create-pull-request@v4.0.4...v6.0.2)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: JS-DevTools/npm-publish
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: peter-evans/create-pull-request
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/authzed-node.yaml

@@ -52,7 +52,7 @@ jobs:
       - run: npm install
       - run: npm test
       - uses: battila7/get-version-action@v2
-      - uses: JS-DevTools/npm-publish@v1
+      - uses: JS-DevTools/npm-publish@v3
         with:
           token: ${{ secrets.NPM_TOKEN }}
           tag: ${{ steps.get_version.outputs.version }}
@@ -64,7 +64,7 @@ jobs:
       matrix:
         node-version: [18, 20, 21]
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - uses: "authzed/action-spicedb@v1"
         with:
           version: "latest"
@@ -84,7 +84,7 @@ jobs:
       - name: Run Yarn tests
         run: CI=true yarn only-run-tests
         working-directory: ./js-dist
-      - uses: actions/upload-artifact@v2
+      - uses: actions/upload-artifact@v4
         with:
           name: js-client
           path: |
@@ -97,15 +97,15 @@ jobs:
     if: github.event_name == 'release'
     steps:
       - name: Download js client build
-        uses: actions/download-artifact@v2
+        uses: actions/download-artifact@v4
         with:
           name: js-client
       - uses: actions/setup-node@v4
         with:
           node-version: 18
       - run: npm install
       - uses: battila7/get-version-action@v2
-      - uses: JS-DevTools/npm-publish@v1
+      - uses: JS-DevTools/npm-publish@v3
         with:
           token: ${{ secrets.NPM_TOKEN }}
           tag: ${{ steps.get_version.outputs.version }}

.github/workflows/automatic-api-update.yaml

@@ -8,8 +8,8 @@ jobs:
     timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
       - name: "Update Buf Script"
         id: buf-update
         uses: authzed/actions/buf-api-update@main
@@ -51,7 +51,7 @@ jobs:
         run: |
           ./buf.gen.yaml
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v4.0.4
+        uses: peter-evans/create-pull-request@v6.0.2
         if: steps.buf-update.outputs.updated == 'true'
         with:
           delete-branch: "true"

.github/workflows/manual-api-update.yaml

@@ -12,8 +12,8 @@ jobs:
     timeout-minutes: 10
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
       - name: "Update Buf Script"
         id: buf-update
         uses: authzed/actions/buf-api-update@main
@@ -55,7 +55,7 @@ jobs:
         run: |
           ./buf.gen.yaml
       - name: Create Pull Request
-        uses: peter-evans/create-pull-request@v4.0.4
+        uses: peter-evans/create-pull-request@v6.0.2
         if: steps.buf-update.outputs.updated == 'true'
         with:
           delete-branch: "true"