fix(ci): key action refs already used by the workflows

[hyperpolymath]

fix(ci): key action refs already used by the workflows

• actions/cache@0057852
• actions/checkout@11d5960
• actions/checkout@34e1148
• actions/checkout@692973e
• actions/checkout@93cb6ef
• actions/checkout@b4ffde6
• actions/checkout@de0fac2
• actions/configure-pages@983d773
• actions/dependency-review-action@5a2ce3f
• actions/deploy-pages@d6db901
• actions/download-artifact@fa0a91b
• actions/upload-artifact@ea165f8
• actions/upload-pages-artifact@56afc60
• codecov/codecov-action@671740a
  ... (7 more)

Every SHA-pinned uses: ref in .github/workflows/ is now present in
.github/workflows/actions.lock. Entry format matches gh actions-lock v0.0.2
(ref/commit/owner_id/repo_id); entries reuse the estate SSOT
(hyperpolymath/standards) lock where the same ref is keyed there, owner/repo
ids otherwise resolved from the GitHub API. No workflow files changed.

Verified: validate-actions-lock.sh -> exit 0 (was: 21 missing ref(s)).

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• .github/workflows/actions.lock is excluded by !**/*.lock

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: d0b973c7-f845-435a-83c1-1f039e152ad3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}