From 94487a88fe7d2c9b3b0fd74438d7c08907b8d216 Mon Sep 17 00:00:00 2001
From: Ingmar Delsink <ingmar@aignostics.com>
Date: Tue, 10 Nov 2026 18:45:11 +0100
Subject: [PATCH] ci(actions): add workflow dependency lockfile

---
 .github/workflows/_scheduled-test-daily.yml |  10 +-
 .github/workflows/_test.yml                 |  10 +-
 .github/workflows/actions.lock              | 204 ++++++++++++++++++++
 3 files changed, 214 insertions(+), 10 deletions(-)
 create mode 100644 .github/workflows/actions.lock

diff --git a/.github/workflows/_scheduled-test-daily.yml b/.github/workflows/_scheduled-test-daily.yml
index 3796d79f6..7b0bfc200 100644
--- a/.github/workflows/_scheduled-test-daily.yml
+++ b/.github/workflows/_scheduled-test-daily.yml
@@ -129,7 +129,7 @@ jobs:
       - name: Test / Unit (multiple Python versions)
         id: unit
         continue-on-error: true
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: unit
           make-target: test_unit_matrix
@@ -140,7 +140,7 @@ jobs:
       - name: Test / Integration (multiple Python versions)
         id: integration
         continue-on-error: true
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: integration
           make-target: test_integration_matrix
@@ -151,7 +151,7 @@ jobs:
       - name: Test / E2E / regular (multiple Python versions)
         id: e2e-regular
         continue-on-error: true
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: e2e
           make-target: test_e2e_matrix
@@ -164,7 +164,7 @@ jobs:
         continue-on-error: true
         if: |
           !github.event.pull_request.draft
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: long-running
           make-target: test_long_running
@@ -175,7 +175,7 @@ jobs:
       - name: Test / E2E / very long running (single Python version)
         id: e2e-very-long-running
         continue-on-error: true
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: very-long-running
           make-target: test_very_long_running
diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml
index 97dc12dc6..af3ccf35f 100644
--- a/.github/workflows/_test.yml
+++ b/.github/workflows/_test.yml
@@ -169,7 +169,7 @@ jobs:
         id: unit
         continue-on-error: true
         if: ${{ !cancelled() }}
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: unit
           make-target: test_unit_matrix
@@ -181,7 +181,7 @@ jobs:
         id: integration
         continue-on-error: true
         if: ${{ !cancelled() }}
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: integration
           make-target: test_integration_matrix
@@ -193,7 +193,7 @@ jobs:
         id: e2e_regular
         continue-on-error: true
         if: ${{ !cancelled() }}
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: e2e
           make-target: test_e2e_matrix
@@ -205,7 +205,7 @@ jobs:
         id: e2e_long_running
         continue-on-error: true
         if: ${{ !cancelled() }}
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: long-running
           make-target: test_long_running
@@ -222,7 +222,7 @@ jobs:
             contains(github.event.pull_request.labels.*.name, 'enable:test:very_long_running') ||
             ((github.event_name == 'push' || github.event_name == 'workflow_dispatch') && startsWith(github.ref, 'refs/heads/release/v'))
           )
-        uses: ./.github/actions/run-tests
+        uses: $/.github/actions/run-tests
         with:
           test-type: very-long-running
           make-target: test_very_long_running
diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock
new file mode 100644
index 000000000..eaac5329e
--- /dev/null
+++ b/.github/workflows/actions.lock
@@ -0,0 +1,204 @@
+# This file is machine-generated by `gh actions-lock`.
+# Do not edit by hand; run `gh actions-lock` to update.
+# Docs: https://gh.io/actions-lockfile
+version: 'v0.0.3'
+workflows:
+    '.github/workflows/_audit.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+    '.github/workflows/_build-native-only.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+    '.github/workflows/_claude-code.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'anthropics/claude-code-action@db77d4d3c98f3f6380e7cd45ffba2342a3dbde3c'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+        - 'pyvista/setup-headless-display-action@10e6efb97af3cd1523828f0e22c39f0e4567f3e4'
+    '.github/workflows/_codeql.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'github/codeql-action@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee'
+    '.github/workflows/_docs.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+    '.github/workflows/_ketryx_report_and_check.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333'
+        - 'ketryx/ketryx-github-action@e7ad6ff71022a4e8158477c4458778bf4d93353b'
+    '.github/workflows/_lint.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+    '.github/workflows/_package-publish.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+        - 'getsentry/action-release@6fb9aeade7061441cf3864e34fbe11a1457ad7dc'
+        - 'orhun/git-cliff-action@a9a95522b26fe6403f7bb24031f21fb573d0f5ff'
+        - 'slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d'
+    '.github/workflows/_scheduled-audit.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+    '.github/workflows/_scheduled-test-daily.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+        - 'codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5'
+        - 'codecov/test-results-action@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3'
+        - 'pyvista/setup-headless-display-action@10e6efb97af3cd1523828f0e22c39f0e4567f3e4'
+        - 'sonarsource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9'
+        - 'spicypizza/create-envfile@ace6d4f5d7802b600276c23ca417e669f1a06f6f'
+    '.github/workflows/_scheduled-test-hourly.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+        - 'spicypizza/create-envfile@ace6d4f5d7802b600276c23ca417e669f1a06f6f'
+    '.github/workflows/_scheduled-test-stress.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+        - 'spicypizza/create-envfile@ace6d4f5d7802b600276c23ca417e669f1a06f6f'
+    '.github/workflows/_test.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+        - 'codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5'
+        - 'codecov/test-results-action@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3'
+        - 'pyvista/setup-headless-display-action@10e6efb97af3cd1523828f0e22c39f0e4567f3e4'
+        - 'sonarsource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9'
+        - 'spicypizza/create-envfile@ace6d4f5d7802b600276c23ca417e669f1a06f6f'
+    '.github/workflows/build-native-only.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+    '.github/workflows/ci-cd.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+    '.github/workflows/claude-code-automation-operational-excellence-weekly.yml': []
+    '.github/workflows/claude-code-automation-pr-review.yml': []
+    '.github/workflows/claude-code-interactive.yml': []
+    '.github/workflows/codeql-scheduled.yml': []
+    '.github/workflows/labels-sync.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'crazy-max/ghaction-github-labeler@548a7c3603594ec17c819e1239f281a3b801ab4d'
+    '.github/workflows/merge-release.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510'
+    '.github/workflows/prepare-release.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+    '.github/workflows/publish-release.yml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510'
+        - 'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884'
+    '.github/workflows/scheduled-audit-hourly.yml': []
+    '.github/workflows/scheduled-testing-production-daily.yml': []
+    '.github/workflows/scheduled-testing-production-hourly.yml': []
+    '.github/workflows/scheduled-testing-staging-daily.yml': []
+    '.github/workflows/scheduled-testing-staging-hourly.yml': []
+dependencies:
+    'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1':
+        ref: 'v7.0.1'
+        commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510':
+        ref: 'v3.3.0'
+        commit: 'sha1-64ab729a6294000f5aa4a4bc0b73d1f32bc45510'
+        owner_id: 44036562
+        repo_id: 642580244
+    'actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333':
+        ref: 'v8.0.2'
+        commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333'
+        owner_id: 44036562
+        repo_id: 192626254
+    'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd':
+        ref: 'v8.0.0'
+        commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd'
+        owner_id: 44036562
+        repo_id: 205262760
+    'actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f':
+        ref: 'v6.3.0'
+        commit: 'sha1-53b83947a5a98c8d113130e565377fae1a50d02f'
+        owner_id: 44036562
+        repo_id: 189476904
+    'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9':
+        ref: 'v7.0.2'
+        commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        owner_id: 44036562
+        repo_id: 192625955
+    'anthropics/claude-code-action@db77d4d3c98f3f6380e7cd45ffba2342a3dbde3c':
+        ref: 'v1.0.254'
+        commit: 'sha1-db77d4d3c98f3f6380e7cd45ffba2342a3dbde3c'
+        owner_id: 76263028
+        repo_id: 986421638
+        uses:
+            - 'oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6'
+    'astral-sh/setup-uv@1c37ad07a6a961277cf70c0d37d6f313000f5884':
+        ref: 'v10.3.0'
+        commit: 'sha1-1c37ad07a6a961277cf70c0d37d6f313000f5884'
+        owner_id: 115962839
+        repo_id: 846733598
+    'codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5':
+        ref: 'v7.1.1'
+        commit: 'sha1-303a32d7a59b442fa8d48b6a1cc6825c09c847a5'
+        owner_id: 8226205
+        repo_id: 200299178
+        uses:
+            - 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd'
+    'codecov/test-results-action@0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3':
+        ref: 'v1.2.1'
+        commit: 'sha1-0fa95f0e1eeaafde2c782583b36b28ad0d8c77d3'
+        owner_id: 8226205
+        repo_id: 761956558
+    'crazy-max/ghaction-github-labeler@548a7c3603594ec17c819e1239f281a3b801ab4d':
+        ref: 'v6.0.0'
+        commit: 'sha1-548a7c3603594ec17c819e1239f281a3b801ab4d'
+        owner_id: 1951866
+        repo_id: 216050313
+    'getsentry/action-release@6fb9aeade7061441cf3864e34fbe11a1457ad7dc':
+        ref: 'v3.7.1'
+        commit: 'sha1-6fb9aeade7061441cf3864e34fbe11a1457ad7dc'
+        owner_id: 1396951
+        repo_id: 273043452
+        uses:
+            - 'actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f'
+    'github/codeql-action@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee':
+        ref: 'v4.39.0'
+        commit: 'sha1-6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee'
+        owner_id: 9919
+        repo_id: 259445878
+    'ketryx/ketryx-github-action@e7ad6ff71022a4e8158477c4458778bf4d93353b':
+        ref: 'v2.0.0'
+        commit: 'sha1-e7ad6ff71022a4e8158477c4458778bf4d93353b'
+        owner_id: 90041084
+        repo_id: 641355909
+    'orhun/git-cliff-action@a9a95522b26fe6403f7bb24031f21fb573d0f5ff':
+        ref: 'v4.9.1'
+        commit: 'sha1-a9a95522b26fe6403f7bb24031f21fb573d0f5ff'
+        owner_id: 24392180
+        repo_id: 377964066
+    'oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6':
+        ref: 'v2.2.0'
+        commit: 'sha1-0c5077e51419868618aeaa5fe8019c62421857d6'
+        owner_id: 108928776
+        repo_id: 512644635
+    'pyvista/setup-headless-display-action@10e6efb97af3cd1523828f0e22c39f0e4567f3e4':
+        ref: 'v5.2.0'
+        commit: 'sha1-10e6efb97af3cd1523828f0e22c39f0e4567f3e4'
+        owner_id: 50384771
+        repo_id: 453513731
+    'slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d':
+        ref: 'v4.0.0'
+        commit: 'sha1-dcb1066f776dd043e64d0e8ba94ca15cc7e1875d'
+        owner_id: 6962987
+        repo_id: 306439799
+    'sonarsource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9':
+        ref: 'v8.3.0'
+        commit: 'sha1-d209202bc7d53ff1cc128f7f907dac145c9d6ae9'
+        owner_id: 545988
+        repo_id: 366408409
+    'spicypizza/create-envfile@ace6d4f5d7802b600276c23ca417e669f1a06f6f':
+        ref: 'v2.0.3'
+        commit: 'sha1-ace6d4f5d7802b600276c23ca417e669f1a06f6f'
+        owner_id: 42011593
+        repo_id: 203468490