ci(actions): add workflow dependency lockfile

.github/workflows/_audit.yml

@@ -17,7 +17,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Dev Environment
-        uses: ./.github/actions/setup-dev-env
+        uses: $/.github/actions/setup-dev-env
 
       - name: Audit
         run: mise run audit

.github/workflows/_lint.yml

@@ -17,7 +17,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Dev Environment
-        uses: ./.github/actions/setup-dev-env
+        uses: $/.github/actions/setup-dev-env
 
       - name: Lint
         run: mise run pre_commit_run_all

.github/workflows/_package-publish.yml

@@ -23,7 +23,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Dev Environment
-        uses: ./.github/actions/setup-dev-env
+        uses: $/.github/actions/setup-dev-env
 
 
       - name: Build distribution

.github/workflows/_scheduled-audit.yml

@@ -19,7 +19,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Dev Environment
-        uses: ./.github/actions/setup-dev-env
+        uses: $/.github/actions/setup-dev-env
 
       - name: Audit
         shell: bash

.github/workflows/_scheduled-test-daily.yml

@@ -30,7 +30,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Dev Environment
-        uses: ./.github/actions/setup-dev-env
+        uses: $/.github/actions/setup-dev-env
 
       - name: Validate and set environment suffix
         id: env_suffix
@@ -54,7 +54,7 @@ jobs:
       - name: Test / Unit
         id: unit
         continue-on-error: true
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: unit
           mise-task: test_unit
@@ -65,7 +65,7 @@ jobs:
       - name: Test / Integration
         id: integration
         continue-on-error: true
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: integration
           mise-task: test_integration
@@ -76,7 +76,7 @@ jobs:
       - name: Test / E2E
         id: e2e
         continue-on-error: true
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: e2e
           mise-task: test_e2e

.github/workflows/_scheduled-test-hourly.yml

@@ -30,7 +30,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Dev Environment
-        uses: ./.github/actions/setup-dev-env
+        uses: $/.github/actions/setup-dev-env
 
       - name: Validate and set environment suffix
         id: env_suffix

.github/workflows/_test.yml

@@ -32,7 +32,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Dev Environment
-        uses: ./.github/actions/setup-dev-env
+        uses: $/.github/actions/setup-dev-env
 
       - name: Release version check
         if: startsWith(github.ref, 'refs/tags/v')
@@ -51,7 +51,7 @@ jobs:
           echo "Development build - Current version in pyproject.toml: $TOML_VERSION"
 
       - name: Test / Unit
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: unit
           mise-task: test_unit
@@ -60,7 +60,7 @@ jobs:
           commit-message: ${{ github.event.head_commit.message }}
 
       - name: Test / Integration
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: integration
           mise-task: test_integration
@@ -69,7 +69,7 @@ jobs:
           commit-message: ${{ github.event.head_commit.message }}
 
       - name: Test / E2E
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: e2e
           mise-task: test_e2e
@@ -78,7 +78,7 @@ jobs:
           commit-message: ${{ github.event.head_commit.message }}
 
       - name: Test / Unit (lowest-direct)
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: unit
           mise-task: test_lowest_direct

.github/workflows/actions.lock

@@ -0,0 +1,148 @@
+# This file is machine-generated by `gh actions-lock`.
+# Do not edit by hand; run `gh actions-lock` to update.
+# Docs: https://gh.io/actions-lockfile
+version: 'v0.0.3'
+workflows:
+    '.github/workflows/_audit.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195'
+    '.github/workflows/_codeql.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'github/codeql-action@9b3254085494b55a0f7c4c2b3d2d52cc712ce370'
+    '.github/workflows/_lint.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195'
+    '.github/workflows/_package-publish.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195'
+        - 'slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d'
+    '.github/workflows/_scheduled-audit.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195'
+    '.github/workflows/_scheduled-test-daily.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5'
+        - 'codecov/test-results-action@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3'
+        - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195'
+        - 'sonarsource/sonarqube-scan-action@4d1dc0c91ee400dcf8a6dddf2f705ac36542e304'
+    '.github/workflows/_scheduled-test-hourly.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195'
+    '.github/workflows/_test.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5'
+        - 'codecov/test-results-action@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3'
+        - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195'
+        - 'sonarsource/sonarqube-scan-action@4d1dc0c91ee400dcf8a6dddf2f705ac36542e304'
+    '.github/workflows/audit-scheduled.yml': []
+    '.github/workflows/bump.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510'
+        - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195'
+    '.github/workflows/check-action-pins.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'suzuki-shunsuke/pinact-action@b1a1f46bb10f2908950d95f626ca8cc109e2cf7d'
+    '.github/workflows/ci-cd.yml': []
+    '.github/workflows/claude-code-automation-pr-review.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'anthropics/claude-code-action@d535f5172dec02b204866b393d6b20b9b2aaf98d'
+    '.github/workflows/codeql-scheduled.yml': []
+    '.github/workflows/git-conventions.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195'
+    '.github/workflows/labels-sync.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'crazy-max/ghaction-github-labeler@548a7c3603594ec17c819e1239f281a3b801ab4d'
+    '.github/workflows/mise-lock-sync.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195'
+        - 'stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c'
+    '.github/workflows/test-scheduled-production-daily.yml': []
+    '.github/workflows/test-scheduled-production-hourly.yml': []
+    '.github/workflows/test-scheduled-staging-daily.yml': []
+    '.github/workflows/test-scheduled-staging-hourly.yml': []
+dependencies:
+    'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1':
+        ref: 'v7.0.1'
+        commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510':
+        ref: 'v3.3.0'
+        commit: 'sha1-64ab729a6294000f5aa4a4bc0b73d1f32bc45510'
+        owner_id: 44036562
+        repo_id: 642580244
+    'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd':
+        ref: 'v8.0.0'
+        commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd'
+        owner_id: 44036562
+        repo_id: 205262760
+    'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9':
+        ref: 'v7.0.2'
+        commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        owner_id: 44036562
+        repo_id: 192625955
+    'anthropics/claude-code-action@d535f5172dec02b204866b393d6b20b9b2aaf98d':
+        ref: 'v1.0.266'
+        commit: 'sha1-d535f5172dec02b204866b393d6b20b9b2aaf98d'
+        owner_id: 76263028
+        repo_id: 986421638
+        uses:
+            - 'oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6'
+    'codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5':
+        ref: 'v7.1.1'
+        commit: 'sha1-303a32d7a59b442fa8d48b6a1cc6825c09c847a5'
+        owner_id: 8226205
+        repo_id: 200299178
+        uses:
+            - 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd'
+    'codecov/test-results-action@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3':
+        ref: 'v1.2.1'
+        commit: 'sha1-0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3'
+        owner_id: 8226205
+        repo_id: 761956558
+    'crazy-max/ghaction-github-labeler@548a7c3603594ec17c819e1239f281a3b801ab4d':
+        ref: 'v6.0.0'
+        commit: 'sha1-548a7c3603594ec17c819e1239f281a3b801ab4d'
+        owner_id: 1951866
+        repo_id: 216050313
+    'github/codeql-action@9b3254085494b55a0f7c4c2b3d2d52cc712ce370':
+        ref: 'v4.39.1'
+        commit: 'sha1-9b3254085494b55a0f7c4c2b3d2d52cc712ce370'
+        owner_id: 9919
+        repo_id: 259445878
+    'jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195':
+        ref: 'v5.2.5'
+        commit: 'sha1-6612f0ef07ed2a736cd1e00a94a065522dd41195'
+        owner_id: 216188
+        repo_id: 738284564
+    'oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6':
+        ref: 'v2.2.0'
+        commit: 'sha1-0c5077e51419868618aeaa5fe8019c62421857d6'
+        owner_id: 108928776
+        repo_id: 512644635
+    'slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d':
+        ref: 'v4.0.0'
+        commit: 'sha1-dcb1066f776dd043e64d0e8ba94ca15cc7e1875d'
+        owner_id: 6962987
+        repo_id: 306439799
+    'sonarsource/sonarqube-scan-action@4d1dc0c91ee400dcf8a6dddf2f705ac36542e304':
+        ref: 'v8.4.0'
+        commit: 'sha1-4d1dc0c91ee400dcf8a6dddf2f705ac36542e304'
+        owner_id: 545988
+        repo_id: 366408409
+    'stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c':
+        ref: 'v7.2.1'
+        commit: 'sha1-d0b01107b5db882071f96de5dd4b54961ea93f4c'
+        owner_id: 1080923
+        repo_id: 191163758
+    'suzuki-shunsuke/pinact-action@b1a1f46bb10f2908950d95f626ca8cc109e2cf7d':
+        ref: 'v3.1.0'
+        commit: 'sha1-b1a1f46bb10f2908950d95f626ca8cc109e2cf7d'
+        owner_id: 13323303
+        repo_id: 663789591

.github/workflows/bump.yml

@@ -31,7 +31,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Dev Environment
-        uses: ./.github/actions/setup-dev-env
+        uses: $/.github/actions/setup-dev-env
 
       - name: Configure git identity
         run: |

.github/workflows/git-conventions.yml

@@ -61,7 +61,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Dev Environment
-        uses: ./.github/actions/setup-dev-env
+        uses: $/.github/actions/setup-dev-env
 
       - name: Validate PR title with commitizen
         env:
@@ -88,7 +88,7 @@ jobs:
           fetch-depth: 0
 
       - name: Setup Dev Environment
-        uses: ./.github/actions/setup-dev-env
+        uses: $/.github/actions/setup-dev-env
 
       - name: Validate PR commits with commitizen
         if: github.event_name == 'pull_request'