Update github/codeql-action action to v4.36.3 #366

	name: Run pre-commit

	on: [push, pull_request]

	# Declare default permissions as read only.
	permissions: read-all

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	pre-commit:
	runs-on: ubuntu-latest
	name: pre-commit
	steps:
	- name: Checkout
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2

	- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6
	with:
	python-version: 3.x

	- name: Remove rh-pre-commit hook (requires VPN)
	uses: mikefarah/yq@0f4fb8d35ec1a939d78dd6862f494d19ec589f19 # v4.52.5
	with:
	cmd: yq -i 'del( .repos[] \| select(.rev == "rh-pre-commit-*"))' .pre-commit-config.yaml

	- uses: garethahealy/pre-commit-action@9638b5f3212a29c34d088fd7d239a62061ea621c # v4.5.1-1

	- name: Check if there are changes
	id: changes
	run: \|
	git checkout HEAD -- .pre-commit-config.yaml
	echo "changed=$(git status --porcelain \| wc -l)" >> $GITHUB_OUTPUT

	- name: Fail if l changes found
	if: steps.changes.outputs.changed >= 1
	run: \|
	echo "Uncommitted changes exist. Failing."
	echo
	git status --porcelain
	exit 1

Provide feedback