ci: vendor validation scripts and remove remote action pins

[hyperpolymath]

Automated PR to fix CI after deleted actions.

[gitar-bot]

CI failed: CodeQL analysis failed in the javascript-typescript job because no valid JavaScript or TypeScript source files were found or processed.

Overview

1 log analyzed showing a fatal CodeQL database finalization failure due to the absence of valid JavaScript or TypeScript source code.

Failures

CodeQL JavaScript/TypeScript Analysis Failure (confidence: high)

• Type: build
• Affected jobs: 90125992104
• Related to change: yes
• Root cause: The CodeQL analysis workflow targeted JavaScript/TypeScript, but the repository contained no source files or only empty/invalid ones (fatal exit code 32).
• Suggested fix: Remove javascript-typescript from the languages matrix in the CodeQL workflow if the repository does not contain JS/TS code, or ensure valid source files are present.

Summary

• Change-related failures: 1 failure in CodeQL workflow analysis due to unmatched language matrix configuration.
• Infrastructure/flaky failures: 0
• Recommended action: Review the CodeQL workflow configuration to ensure only relevant languages are analyzed for this repository.

Code Review ✅ Approved

Vendors validation scripts and removes remote action pins to fix CI reliability. No issues found.

Auto-approved: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria.

Tip

Comment Gitar fix CI or enable auto-apply: gitar auto-apply:on

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[gitar-bot]

Gitar has auto-approved this PR (configure)