fix hash comment to regex that zizmor expects

Author: woutervh

.github/workflows/dependabot-auto-merge.yaml

@@ -30,12 +30,12 @@ jobs:
 
       # repo: https://github.com/actions/checkout
       # releases: https://github.com/actions/checkout/tags
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1 released on 17-07-2026
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
 
       # repo: https://github.com/fastify/github-action-merge-dependabot
       # releases: https://github.com/fastify/github-action-merge-dependabot/tags
       # The action waits for required status checks by default
-      - uses: fastify/github-action-merge-dependabot@73ec4cbb5e56df5591eae286972d5b2201ffe90f  # v3.15.0 released on 19-06-2026
+      - uses: fastify/github-action-merge-dependabot@73ec4cbb5e56df5591eae286972d5b2201ffe90f  # v3.15.0
         with:
             # github-token: ${{ secrets.TOKEN_AUTOMERGE }}
             # Using built-in GITHUB_TOKEN for better security (auto-scoped, auto-expires)

.github/workflows/linting.yaml

@@ -71,7 +71,7 @@ jobs:
 
         # repo: https://github.com/actions/checkout
         # releases: https://github.com/actions/checkout/tags
-        - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1 released on 17-07-2026
+        - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
           with:
               persist-credentials: false
               fetch-depth: 0
@@ -85,15 +85,15 @@ jobs:
         # repo: https://github.com/extractions/setup-just
         # releases: https://github.com/extractions/setup-just/releases
         - name: Install pinned version of just
-          uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3  # v4.0.0 released on 05-04-2026
+          uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3  # v4.0.0
           with:
               just-version: ${{ env.JUST_VERSION }}
 
         # repo: https://github.com/astral-sh/setup-uv
         # releases: https://github.com/astral-sh/setup-uv/tags
         # docs: https://docs.astral.sh/uv/guides/integration/github
         - name: Install pinned version of uv
-          uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d  # v10.0.1 released on 14-08-2026
+          uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d  # v10.0.1
           with:
               python-version: ${{ matrix.python-version }}
               version: ${{ env.UV_VERSION }}

.github/workflows/testing.yaml

@@ -72,7 +72,7 @@ jobs:
 
         # repo: https://github.com/actions/checkout
         # releases: https://github.com/actions/checkout/tags
-        - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1 released on 17-07-2026
+        - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1  # v7.0.1
           with:
               persist-credentials: false
               fetch-depth: 0
@@ -92,15 +92,15 @@ jobs:
         # repo: https://github.com/extractions/setup-just
         # releases: https://github.com/extractions/setup-just/releases
         - name: Install pinned version of just
-          uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3  # v4.0.0 released on 05-04-2026
+          uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3  # v4.0.0
           with:
               just-version: ${{ env.JUST_VERSION }}
 
         # repo: https://github.com/astral-sh/setup-uv
         # releases: https://github.com/astral-sh/setup-uv/tags
         # docs: https://docs.astral.sh/uv/guides/integration/github
         - name: Install pinned version of uv
-          uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d  # v10.0.1 released on 14-08-2026
+          uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d  # v10.0.1
           with:
               cache-dependency-glob: "uv.lock"
               enable-cache: true
@@ -135,7 +135,7 @@ jobs:
         # repo: https://github.com/codecov/codecov-action
         # releases: https://github.com/codecov/codecov-action/tags
         - name: "Upload coverage to Codecov"
-          uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f  # v7.0.0 released on 07-06-2026
+          uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f  # v7.0.0
           with:
               fail_ci_if_error: false # optional (default = false)
               files: var/coverage/pytest-cobertura.xml