Bump Automattic/vip-actions from 0.7.1 to 0.7.4

Bumps [Automattic/vip-actions](https://github.com/automattic/vip-actions) from 0.7.1 to 0.7.4.
- [Release notes](https://github.com/automattic/vip-actions/releases)
- [Commits](Automattic/vip-actions@v0.7.1...v0.7.4)

---
updated-dependencies:
- dependency-name: Automattic/vip-actions
  dependency-version: 0.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Author: dependabot[bot]

.github/workflows/git-hash-security-check.yml

@@ -19,4 +19,4 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Check for short git hashes in package.json
-        uses: Automattic/vip-actions/git-hash-security-check@7b98dcb98d652bf02037977b1b85abb971c345d0
+        uses: Automattic/vip-actions/git-hash-security-check@c8022b66e78461df4f802b935dc0dbb8399f96bc

.github/workflows/npm-prepare-release.yml

@@ -23,7 +23,7 @@ jobs:
         uses: actions/checkout@v6
 
       - name: Run npm-prepare-release
-        uses: Automattic/vip-actions/npm-prepare-release@v0.7.3
+        uses: Automattic/vip-actions/npm-prepare-release@v0.7.4
         with:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           npm-version-type: ${{ inputs.npm-version-type }}

.github/workflows/npm-publish.yml

@@ -17,7 +17,7 @@ jobs:
     if: contains( github.event.pull_request.labels.*.name, '[ Type ] NPM version update' ) && startsWith( github.head_ref, 'release/') && github.event.pull_request.merged == true
 
     steps:
-      - uses: Automattic/vip-actions/npm-publish@v0.7.3
+      - uses: Automattic/vip-actions/npm-publish@v0.7.4
         with:
           USE_TRUSTED_PUBLISHING: 'true'
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}