build: Bump the github-actions group with 14 updates

.github/workflows/ci.yml

@@ -29,7 +29,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Lint markdown
-        uses: melodic-software/ci-workflows/.github/actions/markdown@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/markdown@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
         with:
           config: .markdownlint-cli2.jsonc
 
@@ -42,7 +42,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Spell-check
-        uses: melodic-software/ci-workflows/.github/actions/typos@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/typos@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
         with:
           config: _typos.toml
 
@@ -55,7 +55,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Scan for secrets
-        uses: melodic-software/ci-workflows/.github/actions/gitleaks@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/gitleaks@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
         with:
           config: .gitleaks.toml
 
@@ -68,7 +68,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Check editorconfig conformance
-        uses: melodic-software/ci-workflows/.github/actions/editorconfig@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/editorconfig@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
         with:
           config: .editorconfig-checker.json
 
@@ -81,7 +81,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Lint shell scripts
-        uses: melodic-software/ci-workflows/.github/actions/shellcheck@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/shellcheck@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
         with:
           rcfile: .shellcheckrc
 
@@ -94,7 +94,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Lint workflows
-        uses: melodic-software/ci-workflows/.github/actions/actionlint@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/actionlint@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
 
   jsonschema:
     runs-on: ubuntu-latest
@@ -105,22 +105,22 @@ jobs:
         with:
           persist-credentials: false
       - name: Validate marketplace manifest
-        uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
         with:
           schemafile: https://json.schemastore.org/claude-code-marketplace.json
           files: .claude-plugin/marketplace.json
       - name: Validate plugin manifests
-        uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
         with:
           schemafile: https://json.schemastore.org/claude-code-plugin-manifest.json
           files: plugins/*/.claude-plugin/plugin.json
       - name: Validate dependabot.yml
-        uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
         with:
           builtin-schema: vendor.dependabot
           files: .github/dependabot.yml
       - name: Validate workflows
-        uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/check-jsonschema@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
         with:
           builtin-schema: vendor.github-workflows
           files: >-
@@ -136,7 +136,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Verify shebang files are executable
-        uses: melodic-software/ci-workflows/.github/actions/exec-bit@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/exec-bit@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
 
   machine-specific-paths:
     runs-on: ubuntu-latest
@@ -147,7 +147,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Check for machine-specific paths
-        uses: melodic-software/ci-workflows/.github/actions/machine-specific-paths@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/machine-specific-paths@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
 
   eol-renormalize:
     runs-on: ubuntu-latest
@@ -158,7 +158,7 @@ jobs:
         with:
           persist-credentials: false
       - name: Check index-level EOL drift
-        uses: melodic-software/ci-workflows/.github/actions/eol-renormalize@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/eol-renormalize@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
 
   comment-hygiene:
     runs-on: ubuntu-latest
@@ -171,15 +171,15 @@ jobs:
       - name: Scan comment hygiene
         # The vendored policy library references the literal marker tokens in its
         # own comments, so skip the module to avoid self-matching.
-        uses: melodic-software/ci-workflows/.github/actions/comment-hygiene@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+        uses: melodic-software/ci-workflows/.github/actions/comment-hygiene@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
         with:
           exclude: ':(exclude)modules/comment-hygiene/**'
 
   zizmor:
     permissions:
       contents: read
     # Advisory Actions security lint; findings annotate without blocking.
-    uses: melodic-software/ci-workflows/.github/workflows/zizmor.yml@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+    uses: melodic-software/ci-workflows/.github/workflows/zizmor.yml@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26
     with:
       paths: .
 

.github/workflows/link-check.yml

@@ -19,4 +19,4 @@ jobs:
     permissions:
       contents: read
       issues: write
-    uses: melodic-software/ci-workflows/.github/workflows/link-check.yml@b6431a1644f2d8c447edc7846d12d53dd1dc0743 # b6431a1 2026-06-26
+    uses: melodic-software/ci-workflows/.github/workflows/link-check.yml@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb # b6431a1 2026-06-26

.github/workflows/pr-title.yml

@@ -20,4 +20,4 @@ jobs:
   pr-title:
     permissions:
       pull-requests: read
-    uses: melodic-software/ci-workflows/.github/workflows/semantic-pr.yml@f82733b00c623254e2d2d2407aca205ae58fb7e4
+    uses: melodic-software/ci-workflows/.github/workflows/semantic-pr.yml@69b9c60b6fcd2c10b0d087fd3e6d74cbecb468bb