Update dependencies, merge dependabot PRs

.github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index d44af1d..e089e6d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -6,6 +6,10 @@
       interval: weekly
     cooldown:
       default-days: 7
+    groups:
+      github-actions:
+        patterns:
+          - "*"
     ignore:
       # Only create updates for actions/ references when it's actually required.
       # We use @v$major tags, which already resolve to the latest version within
@@ -21,3 +25,7 @@
       interval: "weekly"
     cooldown:
       default-days: 7
+    groups:
+      pub:
+        patterns:
+          - "*"

.github/workflows/dart.yml

diff --git a/.github/workflows/dart.yml b/.github/workflows/dart.yml
index 4d17538..e96f7c9 100644
--- a/.github/workflows/dart.yml
+++ b/.github/workflows/dart.yml
@@ -20,7 +20,7 @@
         with:
           persist-credentials: false
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
+        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
 
   analyze:
     strategy:
@@ -49,7 +49,7 @@
       # indicates a changed dependency after `pub upgrade`. However, we can't
       # include the pubspec.lock in the cache key as it's not part of the repository.
       # So, we explicitly restore from and update to the cache as needed.
-      - uses: actions/cache/restore@v5
+      - uses: actions/cache/restore@v6
         id: restore
         with:
           path: |
@@ -77,7 +77,7 @@
 
       - name: "Update cache due to changed pubspec.lock"
         if: ${{ hashFiles('**/pubspec.lock') != steps.deps-before.outputs.lockfiles || !steps.restore.outputs.cache-hit }}
-        uses: actions/cache/save@v5
+        uses: actions/cache/save@v6
         with:
           path: |
             ${{ env.PUB_CACHE }}
@@ -115,7 +115,7 @@
       - name: "Setup local pub cache folder"
         run: "echo PUB_CACHE=.dart_tool/pub-cache/ >> $GITHUB_ENV"
         shell: bash
-      - uses: actions/cache/restore@v5
+      - uses: actions/cache/restore@v6
         with:
           path: |
             ${{ env.PUB_CACHE }}