ci: vendor validation scripts and remove remote action pins

[hyperpolymath]

Automated PR to fix CI after deleted actions.

[sonarqubecloud]

Quality Gate passed

Issues
6 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[gitar-bot]

CI failed: CI validation failed because new root entries (.githooks/, .hypatia-ignore, CLAUDE.md, flake.nix) were added without being added to the allowlist.

Overview

1 change-related failure found across 1 log. The repository structure validation script rejected newly introduced root files and directories.

Failures

Root Shape Validation Failure (confidence: high)

• Type: build
• Affected jobs: 90125785521
• Related to change: yes
• Root cause: The script scripts/check-root-shape.sh detected root entries (.githooks/, .hypatia-ignore, CLAUDE.md, flake.nix) that are missing from the allowlist in .machine_readable/root-allow.txt.
• Suggested fix: Add the new root entries to .machine_readable/root-allow.txt or relocate them into appropriate subdirectories.

Summary

• Change-related failures: 1 root shape validation failure caused by unlisted files in the repository root.
• Infrastructure/flaky failures: 0
• Recommended action: Update .machine_readable/root-allow.txt to include the newly added root files/directories.

Code Review ✅ Approved

Vendors validation scripts and removes remote action pins to fix CI stability. No issues found.

Auto-approved: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria.

Tip

Comment Gitar fix CI or enable auto-apply: gitar auto-apply:on

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[gitar-bot]

Gitar has auto-approved this PR (configure)