chore(deps): bump the actions group with 4 updates (#38)

Bumps the actions group with 4 updates:
[github/codeql-action](https://github.com/github/codeql-action),
[actions/deploy-pages](https://github.com/actions/deploy-pages),
[trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog)
and
[editorconfig-checker/action-editorconfig-checker](https://github.com/editorconfig-checker/action-editorconfig-checker).

Updates `github/codeql-action` from 4.37.9 to 4.38.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.38.0</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h2>4.38.0 - 09 Sept 2026</h2>
<ul>
<li>On GitHub-hosted runners, the CodeQL Action now deletes unused
CodeQL bundles from the toolcache before downloading a different bundle,
which frees up disk space for the analysis. We expect to roll this
change out to everyone in September. <a
href="https://redirect.github.com/github/codeql-action/pull/4124">#4124</a></li>
<li>The CodeQL Action now supports CodeQL releases that are compatible
with Linux Arm64 and downloads the native <code>linux-arm64</code>
CodeQL bundle when available. <a
href="https://redirect.github.com/github/codeql-action/pull/4072">#4072</a></li>
<li>Update default CodeQL bundle version to <a
href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.27.0">2.27.0</a>.
<a
href="https://redirect.github.com/github/codeql-action/pull/4129">#4129</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/b96794f015dfd88f77b49b1c93e0fa7110f94c63"><code>b96794f</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4131">#4131</a>
from github/update-v4.38.0-7e08580a9</li>
<li><a
href="https://github.com/github/codeql-action/commit/02d5093871674ea20274117103ce3038c73c77ef"><code>02d5093</code></a>
Update changelog for v4.38.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/7e08580a93dc4e4b9dda167e364577035cf504c6"><code>7e08580</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4130">#4130</a>
from github/henrymercer/workflow-runner-sizing</li>
<li><a
href="https://github.com/github/codeql-action/commit/bfcc52b4f5d98468a5993daa0bf0e4fb3f3ed698"><code>bfcc52b</code></a>
Run slow macOS checks on larger runners</li>
<li><a
href="https://github.com/github/codeql-action/commit/8c251e757c0260283fc50214a06ac768b61d3af4"><code>8c251e7</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4129">#4129</a>
from github/update-bundle/codeql-bundle-v2.27.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/0b7ca400df35985869d4b9146a067865d4115da1"><code>0b7ca40</code></a>
Add changelog note</li>
<li><a
href="https://github.com/github/codeql-action/commit/40484b339517c6bcf00f81eebc95ca041ddca505"><code>40484b3</code></a>
Update default bundle to codeql-bundle-v2.27.0</li>
<li><a
href="https://github.com/github/codeql-action/commit/977e6ceaea7361825998245d787fa3b4d6b9e5df"><code>977e6ce</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4124">#4124</a>
from github/henrymercer/toolcache-bundle-cleanup</li>
<li><a
href="https://github.com/github/codeql-action/commit/40a6b3824794ae1156e1a5320d32e364bf1dcebc"><code>40a6b38</code></a>
Address toolcache cleanup review feedback</li>
<li><a
href="https://github.com/github/codeql-action/commit/deece8f852f048bc3f52fd42c9cc7a99b1ebb252"><code>deece8f</code></a>
Apply suggestion from <a
href="https://github.com/henrymercer"><code>@​henrymercer</code></a></li>
<li>Additional commits viewable in <a
href="https://github.com/github/codeql-action/compare/v4.37.9...v4.38.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/deploy-pages` from 5.0.0 to 5.0.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/deploy-pages/releases">actions/deploy-pages's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.1</h2>
<h1>Changelog</h1>
<ul>
<li>Add backoff and jitter to deployment polling <a
href="https://github.com/yoannchaudet"><code>@​yoannchaudet</code></a>
(<a
href="https://redirect.github.com/actions/deploy-pages/issues/444">#444</a>)</li>
<li>Improve deployment request test coverage <a
href="https://github.com/adwitiyagoyal"><code>@​adwitiyagoyal</code></a>
(<a
href="https://redirect.github.com/actions/deploy-pages/issues/440">#440</a>)</li>
</ul>
<hr />
<p>See details of <a
href="https://github.com/actions/deploy-pages/compare/v5.0.0...v5.0.1">all
code changes</a> since previous release.</p>
<p>:warning: For use with products other than GitHub.com, such as GitHub
Enterprise Server, please consult the <a
href="https://github.com/actions/deploy-pages/#compatibility">compatibility
table</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/deploy-pages/commit/368f82528645a54fb793d4d04e342629a3f51346"><code>368f825</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/deploy-pages/issues/444">#444</a>
from actions/yoannchaudet-deployment-polling-backoff</li>
<li><a
href="https://github.com/actions/deploy-pages/commit/7e97763d1f8271fc88f351a0c275f37de7f32094"><code>7e97763</code></a>
Validate deployment polling intervals</li>
<li><a
href="https://github.com/actions/deploy-pages/commit/0143e11abb4ace1f6858cb44b2ab99eae8a40b45"><code>0143e11</code></a>
Add backoff and jitter to deployment polling</li>
<li><a
href="https://github.com/actions/deploy-pages/commit/5e98f10ce206463e411e82ac66ef0f2df79c5499"><code>5e98f10</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/deploy-pages/issues/440">#440</a>
from actions/user/adwitiya</li>
<li><a
href="https://github.com/actions/deploy-pages/commit/8b0625abb54462fce279dc6ce57ef7ce0fb8b8fc"><code>8b0625a</code></a>
Improve deployment request test coverage</li>
<li>See full diff in <a
href="https://github.com/actions/deploy-pages/compare/cd2ce8fcbc39b97be8ca5fce6e763baed58fa128...368f82528645a54fb793d4d04e342629a3f51346">compare
view</a></li>
</ul>
</details>
<br />

Updates `trufflesecurity/trufflehog` from 3.97.1 to 3.97.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's
releases</a>.</em></p>
<blockquote>
<h2>v3.97.4</h2>
<h2>What's Changed</h2>
<ul>
<li>Make Transport Errors indeterminate for Twilio secrets and
twilioapikeys by <a
href="https://github.com/jordanTunstill"><code>@​jordanTunstill</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5267">trufflesecurity/trufflehog#5267</a></li>
<li>Improve the <code>json-enumerator</code> source by <a
href="https://github.com/bradlarsen"><code>@​bradlarsen</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5265">trufflesecurity/trufflehog#5265</a></li>
<li>added tests for twilio detector fixes by <a
href="https://github.com/jordanTunstill"><code>@​jordanTunstill</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5271">trufflesecurity/trufflehog#5271</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trufflesecurity/trufflehog/compare/v3.97.3...v3.97.4">https://github.com/trufflesecurity/trufflehog/compare/v3.97.3...v3.97.4</a></p>
<h2>v3.97.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix(s3): cut a child context per object so key/size log values don't
pile up by <a
href="https://github.com/mariduv"><code>@​mariduv</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5236">trufflesecurity/trufflehog#5236</a></li>
<li>Revert &quot;[INT-933] De-base64 SourceUnit.UnitData in the GitHub
Source&quot; by <a
href="https://github.com/trufflesteeeve"><code>@​trufflesteeeve</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5269">trufflesecurity/trufflehog#5269</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trufflesecurity/trufflehog/compare/v3.97.2...v3.97.3">https://github.com/trufflesecurity/trufflehog/compare/v3.97.2...v3.97.3</a></p>
<h2>v3.97.2</h2>
<h2>What's Changed</h2>
<ul>
<li>detectors/github/v2: differentiate token type in ExtraData by <a
href="https://github.com/hartsock"><code>@​hartsock</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5223">trufflesecurity/trufflehog#5223</a></li>
<li>Update dependency trufflesecurity/.github to v1.0.4 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5228">trufflesecurity/trufflehog#5228</a></li>
<li>ci: let Renovate bump the golangci-lint pin in scripts/lint.sh by <a
href="https://github.com/bryanbeverly"><code>@​bryanbeverly</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5231">trufflesecurity/trufflehog#5231</a></li>
<li>Update github.com/trufflesecurity/ldap-verify digest to aa52b46 by
<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot]
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5172">trufflesecurity/trufflehog#5172</a></li>
<li>Update github-actions by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5197">trufflesecurity/trufflehog#5197</a></li>
<li>Update aws-sdk-go-v2 monorepo by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5173">trufflesecurity/trufflehog#5173</a></li>
<li>Update module github.com/aws/smithy-go to v1.27.9 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5174">trufflesecurity/trufflehog#5174</a></li>
<li>[SCAN-18] Add SOURCE_TYPE_AWS_SECRETS_MANAGER source type by <a
href="https://github.com/dipto-truffle"><code>@​dipto-truffle</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5234">trufflesecurity/trufflehog#5234</a></li>
<li>[INS-377] Add V2 for weights and biases detector by <a
href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in
<a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4951">trufflesecurity/trufflehog#4951</a></li>
<li>Fix PagerDuty detector: treat 403 and 402 as verified credentials by
<a href="https://github.com/unsmith"><code>@​unsmith</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5230">trufflesecurity/trufflehog#5230</a></li>
<li>[INT-933] De-base64 SourceUnit.UnitData in the GitHub Source by <a
href="https://github.com/camgunz"><code>@​camgunz</code></a> in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5248">trufflesecurity/trufflehog#5248</a></li>
<li>Implement Enumerate for the Jenkins source by <a
href="https://github.com/Ahsan-Sarbaz"><code>@​Ahsan-Sarbaz</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5229">trufflesecurity/trufflehog#5229</a></li>
<li>Update link to Truffle Security documentation by <a
href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5256">trufflesecurity/trufflehog#5256</a></li>
<li>Retry git clone on secondary rate limit (bare 403/429) by <a
href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a>
in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5260">trufflesecurity/trufflehog#5260</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/hartsock"><code>@​hartsock</code></a>
made their first contribution in <a
href="https://redirect.github.com/trufflesecurity/trufflehog/pull/5223">trufflesecurity/trufflehog#5223</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/trufflesecurity/trufflehog/compare/v3.97.1...v3.97.2">https://github.com/trufflesecurity/trufflehog/compare/v3.97.1...v3.97.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/363923b901c911a9164f50b6c423f47c15372b1c"><code>363923b</code></a>
added tests for twilio detector fixes (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5271">#5271</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/f5370819b555a68f3eb60626ee3fd2fb8923b06f"><code>f537081</code></a>
Improve the <code>json-enumerator</code> source (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5265">#5265</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/8a9a4c6be830205560d332398a5e38bc08e54e06"><code>8a9a4c6</code></a>
Made retry exaustion indeterminate for Twilio secrets and twilioapikeys
(<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5267">#5267</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/8947a7f5c537fa4504b38c036c6ec4ed426df72f"><code>8947a7f</code></a>
Revert &quot;De-base64 SourceUnit.UnitData in the GitHub Source (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5248">#5248</a>)&quot;
(<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5269">#5269</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/ea33cd04a6b7a910430b5ee9b1559576b332c14d"><code>ea33cd0</code></a>
fix(s3): cut a child context per object so key/size log values don't
pile up ...</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/cc1fe982afc515d2991365ce8d4d0dd07170fcad"><code>cc1fe98</code></a>
Retry git clone on secondary rate limit (bare 403/429) (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5260">#5260</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/74dcf3f1bdeb0f6ad28061e49bcd29f297634a67"><code>74dcf3f</code></a>
Update link to Truffle Security documentation (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5256">#5256</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/2b75fd2307181da49bb79cd95cdf117e125a3bc7"><code>2b75fd2</code></a>
Implement Enumerate for the Jenkins source (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5229">#5229</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/0c952ace0f842f11c75775922d7400335cf60bc6"><code>0c952ac</code></a>
De-base64 SourceUnit.UnitData in the GitHub Source (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5248">#5248</a>)</li>
<li><a
href="https://github.com/trufflesecurity/trufflehog/commit/1ea7fc1960b818e3c3ac3984f85922e3acba4061"><code>1ea7fc1</code></a>
expand result code in pagerduty detector (<a
href="https://redirect.github.com/trufflesecurity/trufflehog/issues/5230">#5230</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/trufflesecurity/trufflehog/compare/v3.97.1...v3.97.4">compare
view</a></li>
</ul>
</details>
<br />

Updates `editorconfig-checker/action-editorconfig-checker` from 2.2.0 to
3.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/editorconfig-checker/action-editorconfig-checker/releases">editorconfig-checker/action-editorconfig-checker's
releases</a>.</em></p>
<blockquote>
<h2>editorconfig-checker v4</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: support editorconfig-checker binary name for v4 with legacy ec
fallback by <a
href="https://github.com/theoludwig"><code>@​theoludwig</code></a> in <a
href="https://redirect.github.com/editorconfig-checker/action-editorconfig-checker/pull/278">editorconfig-checker/action-editorconfig-checker#278</a></li>
<li>minor workflow improvements by <a
href="https://github.com/klaernie"><code>@​klaernie</code></a> in <a
href="https://redirect.github.com/editorconfig-checker/action-editorconfig-checker/pull/279">editorconfig-checker/action-editorconfig-checker#279</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/editorconfig-checker/action-editorconfig-checker/compare/v2.2.0...v3.0.0">https://github.com/editorconfig-checker/action-editorconfig-checker/compare/v2.2.0...v3.0.0</a></p>
<h2>last v2 release</h2>
<p>This release is the last release of this action, that fixes the
editorconfig-checker core version to <code>v3.11.3</code> - which is the
last release that still uses the <code>ec</code> binary name.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/editorconfig-checker/action-editorconfig-checker/compare/v2.2.0...v2.3.0">https://github.com/editorconfig-checker/action-editorconfig-checker/compare/v2.2.0...v2.3.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/editorconfig-checker/action-editorconfig-checker/commit/51f63319f592f97930c73d9c46184d20bd206393"><code>51f6331</code></a>
Merge pull request <a
href="https://redirect.github.com/editorconfig-checker/action-editorconfig-checker/issues/279">#279</a>
from editorconfig-checker/wf</li>
<li><a
href="https://github.com/editorconfig-checker/action-editorconfig-checker/commit/c70f28eabe1e1ff6d5c0386681bfda2aca46df52"><code>c70f28e</code></a>
also run regen-dist workflow, when the workflow itself changes</li>
<li><a
href="https://github.com/editorconfig-checker/action-editorconfig-checker/commit/d98bed81e32e3d796bf2d8dcf7b0b60ba6ddae8a"><code>d98bed8</code></a>
prevent CI from running twice for dependabot PRs</li>
<li><a
href="https://github.com/editorconfig-checker/action-editorconfig-checker/commit/f2fa590df0c4a3039ee9daeb4f8c76a01641f42a"><code>f2fa590</code></a>
Merge pull request <a
href="https://redirect.github.com/editorconfig-checker/action-editorconfig-checker/issues/278">#278</a>
from editorconfig-checker/feat/ec-binary-name-rename</li>
<li><a
href="https://github.com/editorconfig-checker/action-editorconfig-checker/commit/19c56ada633cc57bbaaa5a5bfe5e75e60b9487bc"><code>19c56ad</code></a>
feat: support renamed editorconfig-checker release assets while keeping
legac...</li>
<li>See full diff in <a
href="https://github.com/editorconfig-checker/action-editorconfig-checker/compare/840e866d93b8e032123c23bac69dece044d4d84c...51f63319f592f97930c73d9c46184d20bd206393">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

.github/workflows/codeql.yml

@@ -39,11 +39,11 @@ jobs:
       - name: Checkout
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@v4.37.9
+        uses: github/codeql-action/init@v4.38.0
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v4.37.9
+        uses: github/codeql-action/analyze@v4.38.0
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/pages.yml

@@ -91,4 +91,4 @@ jobs:
     steps:
       - name: Deploy to GitHub Pages
         id: deployment
-        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
+        uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5.0.1

.github/workflows/quality.yml

@@ -30,7 +30,7 @@ jobs:
         run: |
           find . -type f -perm /111 -name "*.sh" | head -10 || true
       - name: Check for secrets
-        uses: trufflesecurity/trufflehog@v3.97.1
+        uses: trufflesecurity/trufflehog@v3.97.4
         with:
           path: ./
           base: ${{ github.event.pull_request.base.sha || github.event.before }}
@@ -44,7 +44,7 @@ jobs:
         run: |
           find . -type f -size +1M -not -path "./.git/*" | head -10 || echo "No large files"
       - name: EditorConfig check
-        uses: editorconfig-checker/action-editorconfig-checker@840e866d93b8e032123c23bac69dece044d4d84c # v2.2.0
+        uses: editorconfig-checker/action-editorconfig-checker@51f63319f592f97930c73d9c46184d20bd206393 # v3.0.0
         continue-on-error: true
   docs:
     runs-on: ubuntu-latest