chore(deps): bump the actions group with 4 updates - #392

Merged

hyperpolymath merged 2 commits into

mainfrom

dependabot/github_actions/actions-3ea9b48fbf

Sep 25, 2026

GitHub Advanced Security / Hypatia failed Sep 25, 2026 in 3s

5 new alerts

New alerts in code changed by this pull request

5 warnings

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 68 in .github/workflows/agda-meta-checker.yml

Code scanning / Hypatia

Hypatia workflow_hardening: WH004 Warning

workflow .github/workflows/agda-meta-checker.yml:68 pins haskell-actions/setup@v2.12.1 to a tag/branch — mutable ref allows upstream takeover

Check warning on line 48 in .github/workflows/codeql.yml

Code scanning / Hypatia

Hypatia workflow_hardening: WH004 Warning

workflow .github/workflows/codeql.yml:48 pins github/codeql-action/init@v4.38.1 to a tag/branch — mutable ref allows upstream takeover

Check warning on line 54 in .github/workflows/codeql.yml

Code scanning / Hypatia

Hypatia workflow_hardening: WH004 Warning

workflow .github/workflows/codeql.yml:54 pins github/codeql-action/analyze@v4.38.1 to a tag/branch — mutable ref allows upstream takeover

Check warning on line 46 in .github/workflows/mvp-smoke.yml

Code scanning / Hypatia

Hypatia workflow_hardening: WH004 Warning

workflow .github/workflows/mvp-smoke.yml:44 pins taiki-e/install-action@v2.87.18 to a tag/branch — mutable ref allows upstream takeover

Check warning on line 47 in .github/workflows/s4-loop.yml

Code scanning / Hypatia

Hypatia workflow_hardening: WH004 Warning

workflow .github/workflows/s4-loop.yml:45 pins taiki-e/install-action@v2.87.18 to a tag/branch — mutable ref allows upstream takeover