Merge branch 'main' of https://github.com/hyperpolymath/gitbot-fleet

Author: hyperpolymath

.github/workflows/codeql.yml

@@ -38,20 +38,18 @@ jobs:
           # the prior matrix as containing no language present in the repo.
           - language: actions
             build-mode: none
-          - language: rust
-            build-mode: none
 
     steps:
       - name: Checkout
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3
+        uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v3
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3
+        uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v3
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/dogfood-gate.yml

@@ -43,7 +43,7 @@ jobs:
 
       - name: Validate A2ML manifests
         if: steps.detect.outputs.count > 0
-        uses: hyperpolymath/a2ml-validate-action@59145c7d1039fa3059b3ecacdb50ee23d7505898 # main
+        uses: hyperpolymath/a2ml-validate-action@05bcb78917c09702e90ed18004298a6728753914 # main
         with:
           path: '.'
           strict: 'false'
@@ -105,7 +105,7 @@ jobs:
 
       - name: Validate K9 contracts
         if: steps.detect.outputs.k9_count > 0
-        uses: hyperpolymath/k9-validate-action@2d96f43c538964b097d159ed3a56ba5b5ceca227 # main
+        uses: hyperpolymath/k9-validate-action@bddcd9109ee96f9ea3fdb4bf51084fe9cd0909ce # main
         with:
           path: '.'
           strict: 'false'

.github/workflows/panicbot-sweep.yml

@@ -41,7 +41,7 @@ jobs:
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
       - name: Install Rust toolchain
-        uses: dtolnay/rust-toolchain@fa04a1451ff1842e2626ccb99004d0195b455a88 # stable
+        uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c # stable
         with:
           toolchain: stable
 

bots/accessibilitybot/Cargo.lock

@@ -43,7 +43,7 @@ toml = "1.1.2+spec-1.1.0"
 sqlx = { version = "0.8.6", features = ["runtime-tokio-rustls", "sqlite", "postgres", "uuid", "chrono"] }
 
 # GitHub API
-octocrab = "0.53.0"
+octocrab = "0.54.0"
 
 # HTTP client (for ECHIDNA communication)
 reqwest = { version = "0.12.28", default-features = false, features = ["json", "rustls-tls"] }

bots/cipherbot/Cargo.lock

@@ -35,7 +35,7 @@ tracing-subscriber = { version = "0.3.23", features = ["env-filter", "json"] }
 
 # Markdown parsing
 pulldown-cmark = "0.13.4"
-comrak = "0.53.0"
+comrak = "0.54.0"
 
 # HTML parsing (for accessibility checks)
 scraper = "0.27.0"