Merge branch 'main' into chore/cicd-optimizations

Author: hyperpolymath

.github/workflows/codeql.yml

@@ -30,12 +30,12 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v3.28.1
+        uses: github/codeql-action/init@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3.28.1
         with:
           languages: ${{ matrix.language }}
           build-mode: ${{ matrix.build-mode }}
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v3.28.1
+        uses: github/codeql-action/analyze@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3.28.1
         with:
           category: "/language:${{ matrix.language }}"

.github/workflows/hypatia-scan.yml

@@ -60,7 +60,7 @@ jobs:
           echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY
 
       - name: Upload findings artifact
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
+        uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
         with:
           name: hypatia-findings
           path: hypatia-findings.json
@@ -131,7 +131,7 @@ jobs:
 
       - name: Comment on PR with findings
         if: github.event_name == 'pull_request' && steps.scan.outputs.findings_count > 0
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
         with:
           script: |
             const fs = require('fs');

.github/workflows/scorecard-enforcer.yml

@@ -31,7 +31,7 @@ jobs:
           publish_results: true
 
       - name: Upload SARIF
-        uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4
+        uses: github/codeql-action/upload-sarif@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v4
         with:
           sarif_file: results.sarif
 

.github/workflows/scorecard.yml

@@ -28,6 +28,6 @@ jobs:
           results_format: sarif
 
       - name: Upload results
-        uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v3.31.8
+        uses: github/codeql-action/upload-sarif@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3.31.8
         with:
           sarif_file: results.sarif

rescript-ecosystem/packages/core/compiler-source/packages/playground/package.json

@@ -15,7 +15,7 @@
   },
   "devDependencies": {
     "@rollup/plugin-node-resolve": "^16.0.0",
-    "h3": "2.0.1-rc.8",
+    "h3": "2.0.1-rc.15",
     "rollup": "^4.32.0"
   }
 }

rescript-ecosystem/packages/core/compiler-source/yarn.lock

@@ -1561,18 +1561,20 @@ __metadata:
   languageName: node
   linkType: hard
 
-"h3@npm:2.0.1-rc.8":
-  version: 2.0.1-rc.8
-  resolution: "h3@npm:2.0.1-rc.8"
+"h3@npm:2.0.1-rc.15":
+  version: 2.0.1-rc.15
+  resolution: "h3@npm:2.0.1-rc.15"
   dependencies:
     rou3: "npm:^0.7.12"
-    srvx: "npm:^0.10.0"
+    srvx: "npm:^0.11.8"
   peerDependencies:
     crossws: ^0.4.1
   peerDependenciesMeta:
     crossws:
       optional: true
-  checksum: 10c0/663df84dc98b66a975de5cb6667e9b7c6353e24e0cc53a1203625fdf78550a6925d4e91e32db932cfcb6544b8c9b7cb7a4ac2a47fd8784f78763a8ad1bc21150
+  bin:
+    h3: bin/h3.mjs
+  checksum: 10c0/c477b7bef1bdee7150895c7ba61d3e828d5a4f9be3e1cfc4b76190254192aa4d38ae693ab68c69572da7c47d8605996f4c1715de996c30515b1bd72e3b5b4840
   languageName: node
   linkType: hard
 
@@ -2404,7 +2406,7 @@ __metadata:
   dependencies:
     "@rescript/react": "npm:^0.14.0"
     "@rollup/plugin-node-resolve": "npm:^16.0.0"
-    h3: "npm:2.0.1-rc.8"
+    h3: "npm:2.0.1-rc.15"
     rescript: "npm:^12.0.0"
     rollup: "npm:^4.32.0"
   languageName: unknown
@@ -2878,12 +2880,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"srvx@npm:^0.10.0":
-  version: 0.10.0
-  resolution: "srvx@npm:0.10.0"
+"srvx@npm:^0.11.8":
+  version: 0.11.12
+  resolution: "srvx@npm:0.11.12"
   bin:
     srvx: bin/srvx.mjs
-  checksum: 10c0/ccba4749cda8c9b8a5202f0ade335582e932f12fec0ebe6e8fa7b25bea09897713f69f76983d15654925716b433ddad1403f565dbe57be1fde4159fe6ba4be4b
+  checksum: 10c0/b7edecbed95240e4691e3509aa522c015f04bee8c0fba75705d7c220e59f861cb07678446fc13ccda8504beba3185bd50f56e0a0ee5d890c9386a7d9abf97678
   languageName: node
   linkType: hard