ci: vendor validation scripts and remove remote action pins

[hyperpolymath]

Automated PR to fix CI after deleted actions.

[gitar-bot]

Code Review ✅ Approved 1 resolved / 1 findings

Vendors validation scripts and removes remote action pins to fix CI workflows. Ensure the empty PATHS_IGNORE array uses safer expansion to prevent unbound variable errors on older bash versions.

Auto-approved: No blocking issues found.
Please see Auto-approve Docs for details on setting custom approval criteria.

✅ 1 resolved

✅ Edge Case: Empty PATHS_IGNORE array is unbound under set -u on bash <4.4

📄 .githooks/validate-a2ml.sh:37-51
With set -u in effect, iterating an empty array via "${PATHS_IGNORE[@]}" triggers an 'unbound variable' error on bash versions before 4.4 (notably macOS's stock bash 3.2). GitHub's ubuntu-latest ships bash 5.x so CI is unaffected, but if these .githooks/ scripts are ever run locally the script aborts before scanning any files. Guard the expansion to be portable.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[gitar-bot]

Gitar has auto-approved this PR (configure)