build(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.4

.github/workflows/deploy-auto.yml

@@ -16,7 +16,7 @@ jobs:
   auto:
     # Skip this workflow if the commit message contains "AUTOMATED TRANSLATIONS"
     if: ${{ !contains(github.event.head_commit.message, 'AUTOMATED TRANSLATIONS') }}
-    uses: ./.github/workflows/use-deploy-ecs.yml
+    uses: $/.github/workflows/use-deploy-ecs.yml
     permissions:
       contents: read
       id-token: write
@@ -29,7 +29,7 @@ jobs:
 
   notify:
     needs: [auto]
-    uses: ./.github/workflows/use-notify-slack.yml
+    uses: $/.github/workflows/use-notify-slack.yml
     if: ${{ !cancelled() }}
     secrets:
       slack-webhook: ${{ secrets.SLACK_WEBHOOK }}

.github/workflows/deploy-manual.yml

@@ -16,7 +16,7 @@ permissions:
 
 jobs:
   branch:
-    uses: ./.github/workflows/use-deploy-ecs.yml
+    uses: $/.github/workflows/use-deploy-ecs.yml
     permissions:
       contents: read
       id-token: write
@@ -29,7 +29,7 @@ jobs:
 
   notify:
     needs: [branch]
-    uses: ./.github/workflows/use-notify-slack.yml
+    uses: $/.github/workflows/use-notify-slack.yml
     if: ${{ !cancelled() }}
     secrets:
       slack-webhook: ${{ secrets.SLACK_WEBHOOK }}

.github/workflows/deploy-pr.yml

@@ -26,7 +26,7 @@ jobs:
   pr:
     # env not available for job if
     if: ${{ contains(github.event.pull_request.labels.*.name, 'dev-green') || contains(github.event.pull_request.labels.*.name, 'dev-blue') }}
-    uses: ./.github/workflows/use-deploy-ecs.yml
+    uses: $/.github/workflows/use-deploy-ecs.yml
     permissions:
       contents: read
       id-token: write
@@ -39,7 +39,7 @@ jobs:
 
   notify:
     needs: [pr]
-    uses: ./.github/workflows/use-notify-slack.yml
+    uses: $/.github/workflows/use-notify-slack.yml
     if: ${{ success() || failure() }}
     secrets:
       slack-webhook: ${{ secrets.SLACK_WEBHOOK }}

.github/workflows/deploy-release.yml

@@ -11,7 +11,7 @@ permissions:
 
 jobs:
   release:
-    uses: ./.github/workflows/use-deploy-ecs.yml
+    uses: $/.github/workflows/use-deploy-ecs.yml
     permissions:
       contents: read
       id-token: write
@@ -25,7 +25,7 @@ jobs:
 
   notify:
     needs: [release]
-    uses: ./.github/workflows/use-notify-slack.yml
+    uses: $/.github/workflows/use-notify-slack.yml
     if: ${{ !cancelled() }}
     secrets:
       slack-webhook: ${{ secrets.SLACK_WEBHOOK }}

.github/workflows/tests.yml

@@ -68,7 +68,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - run: npm run ci:lint:ts
 
   jslint:
@@ -80,7 +80,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - run: npm run ci:lint:js
 
   stylelint:
@@ -92,7 +92,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - run: npm run ci:lint:scss
 
   elixirlint:
@@ -104,7 +104,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - run: git fetch origin main:main
       - run: npm run ci:lint:ex
 
@@ -117,7 +117,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - run: mix deps.unlock --check-unused
 
   zizmor:
@@ -129,7 +129,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Run zizmor
-        uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1
+        uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4
         with:
           advanced-security: false
 
@@ -140,7 +140,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - name: Cache _build
         uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0
         with:
@@ -162,7 +162,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0
         with:
           path: |
@@ -188,7 +188,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - run: npm run ci:unit:mocha
 
   js_unit_2:
@@ -200,7 +200,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - run: TZ="America/New_York" npm run ci:unit:jest
 
   type_dialyzer:
@@ -212,7 +212,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - uses: mbta/actions/dialyzer@d37877022d4ae12e96663d2e0a970a5214a2e232 # v2.20
 
   type_typescript:
@@ -224,7 +224,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - run: npm run ci:types:ts
 
   elixir_format_check:
@@ -236,7 +236,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - run: npm run ci:format:ex
 
   js_format_check:
@@ -248,7 +248,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - run: npm run ci:format:ts
 
   check_translations:
@@ -260,7 +260,7 @@ jobs:
       - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
         with:
           persist-credentials: false
-      - uses: ./.github/actions/setup-all
+      - uses: $/.github/actions/setup-all
       - uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0
         with:
           path: |

.github/workflows/use-deploy-ecs.yml

@@ -187,14 +187,14 @@ jobs:
     permissions:
       contents: read
     needs: deploy
-    uses: ./.github/workflows/crawler.yml
+    uses: $/.github/workflows/crawler.yml
     with:
       deployment-env: ${{ inputs.deployment-env }}
   monitor:
     permissions:
       contents: read
       id-token: write
-    uses: ./.github/workflows/push-monitor.yml
+    uses: $/.github/workflows/push-monitor.yml
     with:
       deployment-env: ${{ inputs.deployment-env }}
     secrets: