[eNeRGy164]

Summary

• Harden GitHub Actions workflows with pinned action versions, explicit permissions, and tighter publish-job gating.
• Preserve Coveralls reporting and build artifact uploads.
• Add Dependabot updates for GitHub Actions.

Validation

• GitHub shows the branch commit check passing (1/1).
• Ran git diff --check locally.
• Workflow tests were not run locally.

[coveralls]

Coverage Report for CI Build 38052640765

Coverage remained the same at 94.118%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	337
Covered Lines:	322
Line Coverage:	95.55%
Relevant Branches:	88
Covered Branches:	78
Branch Coverage:	88.64%
Branches in Coverage %:	Yes
Coverage Strength:	5.45 hits per line

---

💛 - Coveralls