Bump GitHub Actions

.github/workflows/ci.yml

@@ -36,7 +36,7 @@ jobs:
       - run: pnpm install
       - run: pnpm release:build
       - name: Publish packages to pkg.pr.new
-        uses: mui/mui-public/.github/actions/ci-publish@afa705d3e675d687aaa77f6a3448cd87ea6f5711 # master
+        uses: mui/mui-public/.github/actions/ci-publish@86a5228c41898421f1082ea32df84fe2464f2f84 # master
 
   # Tests dev-only scripts across all supported dev environments
   test-dev:
@@ -116,7 +116,7 @@ jobs:
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Prepare for publishing
-        uses: mui/mui-public/.github/actions/publish-prepare@afa705d3e675d687aaa77f6a3448cd87ea6f5711 # master
+        uses: mui/mui-public/.github/actions/publish-prepare@86a5228c41898421f1082ea32df84fe2464f2f84 # master
         with:
           node-version: '22.23.4'
       - name: Dry run npm publishing

.github/workflows/claude-flake-fix.yml

@@ -28,7 +28,7 @@ jobs:
       contents: write # push the fix branch (publish job)
       pull-requests: write # open the draft PR (publish job)
       issues: write # tracking issue report (publish job)
-    uses: mui/mui-public/.github/workflows/claude-flake-fix.yml@afa705d3e675d687aaa77f6a3448cd87ea6f5711 # master
+    uses: mui/mui-public/.github/workflows/claude-flake-fix.yml@86a5228c41898421f1082ea32df84fe2464f2f84 # master
     with:
       dry-run: ${{ inputs.dry-run || false }}
       model: ${{ inputs.model }} # blank falls through to mui-public's central default

.github/workflows/claude-review.yml

@@ -13,7 +13,7 @@ permissions: {}
 
 jobs:
   claude-review:
-    uses: mui/mui-public/.github/workflows/claude-review.yml@afa705d3e675d687aaa77f6a3448cd87ea6f5711 # master
+    uses: mui/mui-public/.github/workflows/claude-review.yml@86a5228c41898421f1082ea32df84fe2464f2f84 # master
     permissions:
       contents: read # read the repo (checkout + git diff)
       id-token: write # mint the GitHub OIDC token exchanged for a Claude token via WIF

.github/workflows/claude-triage.yml

@@ -25,7 +25,7 @@ jobs:
       pull-requests: write
       issues: write
       id-token: write
-    uses: mui/mui-public/.github/workflows/claude-triage.yml@310428df67f9ae6c99c8a44c7aed8b26f3b671df # master
+    uses: mui/mui-public/.github/workflows/claude-triage.yml@86a5228c41898421f1082ea32df84fe2464f2f84 # master
     with:
       issue-number: ${{ github.event.issue.number }}
       mode: triage

.github/workflows/closed-issue-message.yml

@@ -11,7 +11,7 @@ jobs:
   add-comment:
     name: Add closing message
     if: github.event.issue.state_reason == 'completed'
-    uses: mui/mui-public/.github/workflows/issues_add-closing-message.yml@afa705d3e675d687aaa77f6a3448cd87ea6f5711 # master
+    uses: mui/mui-public/.github/workflows/issues_add-closing-message.yml@86a5228c41898421f1082ea32df84fe2464f2f84 # master
     permissions:
       contents: read
       issues: write

.github/workflows/codeql.yml

@@ -19,7 +19,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+        uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           languages: typescript
           config-file: ./.github/codeql/codeql-config.yml
@@ -30,4 +30,4 @@ jobs:
           # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
           # queries: security-extended,security-and-quality
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+        uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1

.github/workflows/create-cherry-pick-pr.yml

@@ -12,7 +12,7 @@ permissions: {}
 jobs:
   create_pr:
     name: Create cherry-pick PR
-    uses: mui/mui-public/.github/workflows/prs_create-cherry-pick-pr.yml@afa705d3e675d687aaa77f6a3448cd87ea6f5711 # master
+    uses: mui/mui-public/.github/workflows/prs_create-cherry-pick-pr.yml@86a5228c41898421f1082ea32df84fe2464f2f84 # master
     permissions:
       contents: write
       pull-requests: write

.github/workflows/issue-status-label-handler.yml

@@ -18,4 +18,4 @@ jobs:
       issues: write
       actions: write
     name: Handle status labels
-    uses: mui/mui-public/.github/workflows/issues_status-label-handler.yml@0a555da875ab03199afe8f28dbb4c723f853a52d # master
+    uses: mui/mui-public/.github/workflows/issues_status-label-handler.yml@86a5228c41898421f1082ea32df84fe2464f2f84 # master

.github/workflows/no-response.yml

@@ -16,4 +16,4 @@ jobs:
       issues: write
       pull-requests: write
     name: Handle stale issues and PRs
-    uses: mui/mui-public/.github/workflows/general_handle-stale-issues-and-prs.yml@0a555da875ab03199afe8f28dbb4c723f853a52d # master
+    uses: mui/mui-public/.github/workflows/general_handle-stale-issues-and-prs.yml@86a5228c41898421f1082ea32df84fe2464f2f84 # master

.github/workflows/publish.yml

@@ -47,7 +47,7 @@ jobs:
           ref: ${{ github.event_name == 'push' && github.sha || inputs.sha }}
           fetch-depth: 0 # Fetch full history for proper git operations
       - name: Prepare for publishing
-        uses: mui/mui-public/.github/actions/publish-prepare@afa705d3e675d687aaa77f6a3448cd87ea6f5711 # master
+        uses: mui/mui-public/.github/actions/publish-prepare@86a5228c41898421f1082ea32df84fe2464f2f84 # master
         with:
           node-version: '22.23.4'
       - name: Publish packages
@@ -70,7 +70,7 @@ jobs:
           ref: ${{ inputs.sha }}
           fetch-depth: 0 # Fetch full history for proper git operations
       - name: Prepare for publishing
-        uses: mui/mui-public/.github/actions/publish-prepare@afa705d3e675d687aaa77f6a3448cd87ea6f5711 # master
+        uses: mui/mui-public/.github/actions/publish-prepare@86a5228c41898421f1082ea32df84fe2464f2f84 # master
         with:
           node-version: '22.23.4'
       - name: Publish packages

.github/workflows/scorecards.yml

@@ -40,6 +40,6 @@ jobs:
           publish_results: true
       # Upload the results to GitHub's code scanning dashboard.
       - name: Upload to code-scanning
-        uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0
+        uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
         with:
           sarif_file: results.sarif