From abe49a80406b3f683cd06e423824a3068438fdf9 Mon Sep 17 00:00:00 2001
From: luckyPipewrench <gitlucky@pipelab.org>
Date: Sat, 9 May 2026 13:03:15 -0400
Subject: [PATCH] ci: bump pipelock SHA pin to v2.4.0

Pipelock v2.4.0 tagged 2026-05-09. Bump the SHA-pinned action ref so the
verify-python CI smoke runs against the current shipped pipelock.

SHA 9b38f69593b24964042dfeb1f13d7088832bf817 corresponds to git tag v2.4.0
in luckyPipewrench/pipelock.

Verifier behaviour unchanged.
---
 .github/workflows/ci.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index fa3ef3a..07b866d 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: Pipelock Scan
-        uses: luckyPipewrench/pipelock@7a3b7de4a5552b4e756eb930256468b7cbd616b1 # v2.3.0
+        uses: luckyPipewrench/pipelock@9b38f69593b24964042dfeb1f13d7088832bf817 # v2.4.0
         with:
           scan-diff: 'true'
           fail-on-findings: 'true'