From f89931f54235d008c4c5e865197e6fb479cb0b85 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 10 Sep 2026 14:57:00 +0000
Subject: [PATCH] chore(deps): bump the workflow-updates group across 1
 directory with 4 updates

Bumps the workflow-updates group with 4 updates in the / directory: [typst-community/setup-typst](https://github.com/typst-community/setup-typst), [voidzero-dev/setup-vp](https://github.com/voidzero-dev/setup-vp), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).


Updates `typst-community/setup-typst` from 5.2.0 to 5.3
- [Release notes](https://github.com/typst-community/setup-typst/releases)
- [Commits](https://github.com/typst-community/setup-typst/compare/40d32bb6ccb235bd7f5164cb47cfd40a5ea3a314...9107b8dd77d7a7fd6c5faebbb507cac28069042e)

Updates `voidzero-dev/setup-vp` from 1.17.0 to 1.19.0
- [Release notes](https://github.com/voidzero-dev/setup-vp/releases)
- [Commits](https://github.com/voidzero-dev/setup-vp/compare/313600b80b104eadebb9111787d37a2e83e014ca...49c3e4e92c52e7f8392712a9267bbe71c5ab30e5)

Updates `github/codeql-action/init` from 4.37.7 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...cdf488f595d80d6e07e03d4674febd5ab45fa938)

Updates `github/codeql-action/analyze` from 4.37.7 to 4.37.9
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...cdf488f595d80d6e07e03d4674febd5ab45fa938)

---
updated-dependencies:
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.37.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workflow-updates
- dependency-name: github/codeql-action/init
  dependency-version: 4.37.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: workflow-updates
- dependency-name: typst-community/setup-typst
  dependency-version: '5.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workflow-updates
- dependency-name: voidzero-dev/setup-vp
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: workflow-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/alpha-release.yml | 2 +-
 .github/workflows/ci.yml            | 4 ++--
 .github/workflows/codeql.yml        | 4 ++--
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/alpha-release.yml b/.github/workflows/alpha-release.yml
index fc7317e..d4d6407 100644
--- a/.github/workflows/alpha-release.yml
+++ b/.github/workflows/alpha-release.yml
@@ -48,7 +48,7 @@ jobs:
         with:
           node-version: 22.16
           cache: npm
-      - uses: typst-community/setup-typst@40d32bb6ccb235bd7f5164cb47cfd40a5ea3a314 # v5
+      - uses: typst-community/setup-typst@9107b8dd77d7a7fd6c5faebbb507cac28069042e # v5
         with:
           typst-version: 0.15.0
       - name: Validate release contract
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fe3fca7..e18bfb1 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -30,7 +30,7 @@ jobs:
         with:
           node-version: 22.16
           cache: npm
-      - uses: typst-community/setup-typst@40d32bb6ccb235bd7f5164cb47cfd40a5ea3a314 # v5
+      - uses: typst-community/setup-typst@9107b8dd77d7a7fd6c5faebbb507cac28069042e # v5
         with:
           typst-version: 0.15.0
       - run: npm ci
@@ -96,7 +96,7 @@ jobs:
         with:
           persist-credentials: false
           submodules: true
-      - uses: voidzero-dev/setup-vp@313600b80b104eadebb9111787d37a2e83e014ca # v1.17.0
+      - uses: voidzero-dev/setup-vp@49c3e4e92c52e7f8392712a9267bbe71c5ab30e5 # v1.19.0
         with:
           working-directory: t3code-fork
           node-version-file: package.json
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index a7378f3..28c3dfe 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -21,7 +21,7 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           persist-credentials: false
-      - uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
+      - uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4
         with:
           languages: javascript-typescript
-      - uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4
+      - uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4