`.github/workflows/ci.yml` uses `actions/checkout@v4`, `actions/setup-node@v4`, `actions/setup-python@v5`. Major tags move. Pin each `uses:` to a full commit SHA. Walk nested `uses:` the same way. Workflow is test/coverage only; still pin it.
.github/workflows/ci.ymlusesactions/checkout@v4,actions/setup-node@v4,actions/setup-python@v5. Major tags move.Pin each
uses:to a full commit SHA. Walk nesteduses:the same way. Workflow is test/coverage only; still pin it.