From f0d35fac324f2b05edddc24362f978cadc2a6cf9 Mon Sep 17 00:00:00 2001
From: hyperpolymath <6759885+hyperpolymath@users.noreply.github.com>
Date: Sat, 30 May 2026 18:58:05 +0100
Subject: [PATCH] =?UTF-8?q?fix(ci):=20migrate=20actions/setup-haskell=20(d?=
 =?UTF-8?q?eprecated)=20=E2=86=92=20haskell-actions/setup?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

The pin `actions/setup-haskell@28c8ff1d6cbeaed15ce310b1952dc19352a0a07d # v1.1.5`
is doubly broken: the SHA is fabricated (gh api -> 422), and the action
`actions/setup-haskell` was deprecated by GitHub years ago in favour of
the community-maintained `haskell-actions/setup`.

Replaced with `haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2.11.0`
which is the current canonical Haskell setup action and matches what the
rest of the estate uses. The `ghc-version` and `cabal-version` inputs are
unchanged (same interface).

Provenance: 2026-05-30 estate audit.
---
 .github/workflows/haskell.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/haskell.yml b/.github/workflows/haskell.yml
index 8adc622..fabb135 100644
--- a/.github/workflows/haskell.yml
+++ b/.github/workflows/haskell.yml
@@ -18,7 +18,7 @@ jobs:
 
     steps:
     - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-    - uses: actions/setup-haskell@28c8ff1d6cbeaed15ce310b1952dc19352a0a07d # v1.1.5
+    - uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2.11.0
       with:
         ghc-version: '8.10.3'
         cabal-version: '3.2'