diff --git a/.github/workflows/bazel.yml.disabled b/.github/workflows/bazel.yml.disabled
index 05389979a5..228065913d 100644
--- a/.github/workflows/bazel.yml.disabled
+++ b/.github/workflows/bazel.yml.disabled
@@ -8,16 +8,19 @@ on:
       - master
   pull_request: {}
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: Bazel
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
       if: github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.ref == 'refs/heads/master'
 
-    - uses: actions/cache@v2
+    - uses: actions/cache@v4
       id: caching-stage
       name: Cache Bazel artifacts
       with:
diff --git a/.github/workflows/haskell.yml b/.github/workflows/haskell.yml
index e42629b3be..bef36f0f87 100644
--- a/.github/workflows/haskell.yml
+++ b/.github/workflows/haskell.yml
@@ -8,6 +8,9 @@ on:
       - master
   pull_request:
 
+permissions:
+  contents: read
+
 jobs:
   build:
     name: ghc ${{ matrix.ghc }}
@@ -17,30 +20,29 @@ jobs:
         ghc: ["8.10", "9.2"]
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
       if: github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.ref == 'refs/heads/master'
 
-    - uses: haskell/actions/setup@v1
+    - uses: haskell-actions/setup@d9b5b3fcf7ca56b8fe585c9b77d3b0ce466affd2 # v2.7.10
       name: Setup Haskell
       with:
         ghc-version: ${{ matrix.ghc }}
 
-    - uses: actions/cache@v1
-      id: cache-cabal
-      name: Cache Cabal artifacts
-      with:
-        path: dist-cache
-        key: ${{ runner.os }}-${{ matrix.ghc }}-${{ matrix.cabal }}-cabal-cache-${{ hashFiles('**/*.cabal') }}
-        restore-keys: |
-          ${{ runner.os }}-${{ matrix.ghc }}-${{ matrix.cabal }}-cabal-cache-
-          ${{ runner.os }}-${{ matrix.ghc }}-${{ matrix.cabal }}-
-          ${{ runner.os }}-${{ matrix.ghc }}-
-          ${{ runner.os }}-
+    # - uses: actions/cache@v4
+    #   id: cache-cabal
+    #   name: Cache Cabal artifacts
+    #   with:
+    #     path: dist-cache
+    #     key: ${{ runner.os }}-${{ matrix.ghc }}-${{ matrix.cabal }}-cabal-cache-${{ hashFiles('**/*.cabal') }}
+    #     restore-keys: |
+    #       ${{ runner.os }}-${{ matrix.ghc }}-${{ matrix.cabal }}-cabal-cache-
+    #       ${{ runner.os }}-${{ matrix.ghc }}-${{ matrix.cabal }}-
+    #       ${{ runner.os }}-${{ matrix.ghc }}-
+    #       ${{ runner.os }}-
 
-    - name: Get cabal-cache
-      run: |
-        curl -L https://github.com/haskell-works/cabal-cache/releases/download/v1.0.1.8/cabal-cache_x86_64_linux.tar.gz > ./cc.tar.gz
-        tar -xvf ./cc.tar.gz
+    # - name: Get cabal-cache
+    #   run: |
+    #     cabal new-install cabal-cache
 
     - name: Configure project
       run: |
@@ -48,8 +50,8 @@ jobs:
         cabal v2-configure --project-file=cabal.project.ci --disable-optimization --enable-tests --write-ghc-environment-files=always -j2
         cd semantic-source && cabal v2-configure --project-file=cabal.project.ci --disable-optimization --enable-tests --write-ghc-environment-files=always -j2
 
-    - name: Restore from cache
-      run: ./cabal-cache sync-from-archive --threads=2 --archive-uri=dist-cache || true
+    # - name: Restore from cache
+    #   run: cabal-cache sync-from-archive --threads=2 --archive-uri=dist-cache || true
 
     - name: Build & test
       run: |
@@ -69,5 +71,5 @@ jobs:
         cabal v2-run   --project-file=cabal.project.ci semantic-typescript:test
         cd semantic-source && cabal v2-run   --project-file=cabal.project.ci semantic-source:test
 
-    - name: Write out cache
-      run: ./cabal-cache sync-to-archive --threads=2 --archive-uri=dist-cache
+    # - name: Write out cache
+    #   run: cabal-cache sync-to-archive --threads=2 --archive-uri=dist-cache
diff --git a/CODEOWNERS b/CODEOWNERS
index c010ba8c15..afc7ad42da 100644
--- a/CODEOWNERS
+++ b/CODEOWNERS
@@ -1 +1 @@
-* @github/semantic-code
+* @github/blackbird