ci: vendor validation scripts and remove remote action pins

[hyperpolymath]

Automated PR to fix CI after deleted actions.

[gitar-bot]

CI failed: CI failed due to a licence mismatch between the LICENSE file and package manifest, and a CodeQL configuration error attempting to analyze JavaScript in a PHP repository.

Overview

Two distinct failures occurred across the CI jobs: a build validation error due to inconsistent license definitions, and a CodeQL configuration error where an unsupported language (javascript-typescript) was analyzed in a PHP repository.

Failures

Licence Consistency Check Failed (confidence: high)

• Type: build
• Affected jobs: 90125585374
• Related to change: yes
• Root cause: The licence specified in the LICENSE file (MPL-2.0) does not match the manifest licence declared in './sanctify-php.cabal' (LicenseRef-PMPL-1.0-or-later).
• Suggested fix: Update either the LICENSE file or the ./sanctify-php.cabal manifest file so that the declared licence values match consistently.

CodeQL JavaScript Analysis Failure (confidence: high)

• Type: configuration
• Affected jobs: 90125583712
• Related to change: unclear
• Root cause: The CodeQL workflow includes 'javascript-typescript' in its language matrix, but the repository contains no JavaScript or TypeScript files, causing CodeQL extraction to fail with exit code 32.
• Suggested fix: Remove 'javascript-typescript' from the languages matrix in the CodeQL workflow configuration.

Summary

• Change-related failures: 1 build failure caused by a licence mismatch between project files and manifest metadata.
• Infrastructure/flaky failures: 0 infrastructure or flaky test failures.
• Recommended action: Fix the license declaration discrepancy in the project manifest/license file, and update the CodeQL workflow matrix to exclude unused languages.

Code Review ✅ Approved

Vendors validation scripts and removes remote action pins to fix CI after deleted actions. No issues found.

Auto-approved: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria.

Tip

Comment Gitar fix CI or enable auto-apply: gitar auto-apply:on

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[gitar-bot]

Gitar has auto-approved this PR (configure)